Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Parker Newman

Researcher fromConnecttech
#46072of 53,633
5.5Total CVSS
Vulnerabilities · 1
PT-2025-4344
5.5
2025-01-07
Nvidia · Tegra · CVE-2025-21663
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.6.74 **Description** The issue is related to the Linux kernel's handling of IOMMU stream IDs for Nvidia's Tegra MGBE controllers. The current driver is hardcoded to use MGBE0's stream ID for all controllers, causing softirq timeouts and kernel panics when using controllers other than MGBE0. This results in errors such as NETDEV WATCHDOG timeouts and register MEM TYPE PAGE POOL RxQ-0 errors. The problem is resolved by reading the IOMMU stream ID from the device tree. **Recommendations** Update to Linux kernel version 6.6.74 or later to resolve the issue. As a temporary workaround, consider disabling the use of controllers other than MGBE0 until a patch is available. Restrict access to the vulnerable `handle softirqs()` function to minimize the risk of exploitation. Avoid using the `dwmac-tegra` driver with controllers other than MGBE0 until the issue is resolved.