PT-2025-4344 · Nvidia+5 · Tegra+5
Parker Newman
·
Published
2025-01-07
·
Updated
2025-10-15
·
CVE-2025-21663
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
The issue is related to the Linux kernel's handling of IOMMU stream IDs for Nvidia's Tegra MGBE controllers. The current driver is hardcoded to use MGBE0's stream ID for all controllers, causing softirq timeouts and kernel panics when using controllers other than MGBE0. This results in errors such as NETDEV WATCHDOG timeouts and register MEM TYPE PAGE POOL RxQ-0 errors. The problem is resolved by reading the IOMMU stream ID from the device tree.
Recommendations
Update to Linux kernel version 6.6.74 or later to resolve the issue. As a temporary workaround, consider disabling the use of controllers other than MGBE0 until a patch is available. Restrict access to the vulnerable
handle softirqs() function to minimize the risk of exploitation. Avoid using the dwmac-tegra driver with controllers other than MGBE0 until the issue is resolved.Exploit
Fix
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Red Hat
Suse
Tegra
Ubuntu