Today's Trends
highInvestigatingLinux

Linux Kernel NVIDIA Tegra and AMD SEV-SNP Vulnerabilities

  1. Investigating(current)
  2. Trending(upcoming)
  3. Workaround available(upcoming)
  4. Resolved(upcoming)

Executive summary

Security vulnerabilities in the Linux kernel affect NVIDIA Tegra io_uring canceled task work handling and AMD processor RMP checks for IOMMU host buffers. These flaws can allow local attackers to cause a denial of service or compromise system integrity.

No verified workaround yet

None of the linked reports describe a mitigation. Follow this incident to hear when one appears.

Official fix
Technical root cause

The io_uring subsystem failed to properly handle canceled task work during wait operations, and certain AMD processors lacked proper RMP checks when IOMMU accessed host buffers.

Evidence

2 reports · 2 CVEShow
  1. [1]
    CVE First report
    USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities(opens security advisory in a new tab)

    It was discovered that the io_uring subsystem in the Linux kernel did not properly handle canceled task work when processing certain wait operations, leading to the operation being performed in the wrong task context. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2026-81010) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following…

    by Ubuntu Security 0upvotes 0comments

  2. [2]
    CVE
    USN-9003-1: Linux kernel (NVIDIA) vulnerabilities(opens security advisory in a new tab)

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:…

    by Ubuntu Security 0upvotes 0comments93% match

Timeline

  1. First report on security advisory

    USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities

    Source