CVE-2026-89450

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv module. A Virtual Machine Manager (VMM) can exploit this vulnerability by providing a virtual Stream ID (vSID) that exceeds the intended 20-bit width of the SID_MATCH field. This improper input validation causes the system to incorrectly process the vSID, leading to the aliasing of an unintended Stream ID. This could result in unexpected behavior or security bypasses within the IOMMU.

This vulnerability is rated as an Important severity flaw because a privileged user within a virtual machine could trigger stream identifier aliasing to bypass IOMMU memory protections, risking host integrity and confidentiality. Exposure is strictly limited to systems deployed on ARM architectures utilizing the NVIDIA Tegra241 Command Queue Virtualization interface. Environments operating on other hardware platforms or configurations that do not expose virtualized IOMMU stream mappings are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.