Out-of-bounds read in Linux kernel - CVE-2026-90425
Published: September 18, 2026
Vulnerability identifier: #VU151049
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-90425
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to perform an out-of-bounds read.
The vulnerability exists due to an out-of-bounds read in tegra241_vintf_init_vsid() when mapping a guest vSID for a device without stream IDs. A local user can request a guest vSID mapping for such a device to perform an out-of-bounds read.
For devices with multiple stream IDs, only the first stream ID is mapped, preventing guest vSID invalidations from reaching the other ATC and IOTLB entries.
Affected software
Linux kernel
How to mitigate CVE-2026-90425
Install security update from vendor's repository.