Uninitialized Clock Rate Vulnerability in Legacy Tegra Devices by NVIDIA

CVE-2026-99259

What is CVE-2026-99259?

A vulnerability exists in the Linux kernel specifically affecting legacy 32-bit Tegra devices, where the early_pmc->rate variable remains uninitialized. This oversight arises from recent modifications in the PMC driver that transition to a dynamic context for managing the PMC. Consequently, the rate for the early PMC context is not being updated, leading to potential inconsistencies in power management for these devices. The issue can be addressed by initializing the early_pmc->rate variable during the setup process for the PMC context, ensuring stability and reliability for affected systems.

References