CVE-2026-90428

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability occurs because the error interrupt is requested before a critical array is properly set up. If a Command Queue Virtualization (CMDQV) device has a pending error during a kernel restart (kexec), the interrupt handler may attempt to access uninitialized memory. This could lead to system instability or a denial of service.

This vulnerability is rated with a Low severity because it requires specialized NVIDIA Tegra241 hardware architecture and relies on an unhandled hardware error persisting across a warm kexec reboot. In standard Red Hat Enterprise Linux deployments, the driver is restricted to specific ARM64 hardware platforms and is not invoked on mainstream architectures. Consequently, the flaw cannot be triggered remotely or during standard boot cycles, significantly restricting the potential attack surface and operational risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.