CVE-2026-90430

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A local attacker could potentially trigger a system crash, leading to a Denial of Service (DoS). This occurs because a pointer to a command queue (vcmdq) is stored before it is fully initialized. If an error is encountered during this brief window, the error handling routine may attempt to dereference this uninitialized pointer, causing the system to crash.

This vulnerability is rated as Low severity because it requires specialized NVIDIA Tegra241 hardware and relies on a hardware error interrupt firing during an early initialization window, such as across a kexec reboot. Red Hat systems operating on architectures without this specific hardware do not expose the vulnerable driver. Furthermore, triggering the condition under normal operational workflows is highly improbable, as it depends on an unhandled hardware error state.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.