CVE-2026-80883

A flaw was found in the Linux kernel's Tegra graphics driver (drm/tegra: gr2d/gr3d). The host1x_client_register() function is called before the address register map is fully initialized, making the device available to userspace prematurely. This timing issue could allow a local user to submit a job before the register map is ready, potentially leading to system instability or a denial of service (DoS).

A race in the Tegra DRM gr2d/gr3d probe path can expose the HOST1X client to userspace before the address register map is initialized. A local process may then submit a GPU job during this small window while address register validation state is incomplete. For the CVSS the PR:L is used because triggering requires local access to the Tegra DRM or host1x userspace interface, not administrator privileges in the paranoid interpretation. The issue is not network reachable and is limited to systems using the affected Tegra DRM engines. Impact is at least local denial of service, and in the worst case may include confidentiality or integrity impact if an early job can program GPU address registers before the normal address validation data is ready.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.