Linux Kernel DMA Coherent Memory Allocation Error Check Vulnerability in Tegra NVDEC Driver

Vulnerability

A vulnerability in the Linux kernel's Tegra NVDEC driver has been addressed by adding a proper error check for the DMA memory allocation function. The issue arose because the driver did not correctly handle a NULL return value from the 'dma_alloc_coherent' function, which is crucial for allocating memory that is coherent for DMA operations. This oversight could lead to improper handling of memory allocation errors, potentially causing instability or unexpected behavior in the driver. The vulnerability was introduced when the NVDEC driver was added and has been fixed by aligning the error handling with established practices in other parts of the Tegra DRM subsystem.

Impact

The vulnerability could lead to improper error handling in the NVDEC driver, allowing for potential memory management issues that could disrupt normal driver operation.

Reproduction

The vulnerability can be reproduced by using the Tegra NVDEC driver in a scenario where the 'dma_alloc_coherent' function fails to allocate memory, returning a NULL pointer. The driver, in its original state, would not correctly handle this failure, potentially leading to undefined behavior.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability. The specific commit that resolves the issue can be found in the Linux kernel Git repository.

Added: Aug 16, 2025, 12:30 PM
Updated: Aug 16, 2025, 12:30 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
0.4
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.