https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:15:29 +0000 https://db.gcve.eu/vuln/cve-2026-90425 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID</p> <p>tegra241_vintf_init_vsid() maps a guest vSID to a single physical Stream ID taken from master-&gt;streams[0], and only warns when the device does not have exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others&#39; ATC and IOTLB entries; a device with none makes master-&gt;streams a ZERO_SIZE_PTR, read out of bounds.</p> <p>Reject the mapping with -EOPNOTSUPP if master-&gt;num_streams is not one.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID</p> <p>tegra241_vintf_init_vsid() maps a guest vSID to a single physical Stream ID taken from master-&gt;streams[0], and only warns when the device does not have exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others&#39; ATC and IOTLB entries; a device with none makes master-&gt;streams a ZERO_SIZE_PTR, read out of bounds.</p> <p>Reject the mapping with -EOPNOTSUPP if master-&gt;num_streams is not one.</p> https://db.gcve.eu/vuln/cve-2026-90425