Executive brief
A logic error was identified in the Linux kernel's memory controller driver for NVIDIA Tegra124 chips. This component manages how the system communicates with physical memory. The error incorrectly handled memory timing settings, which could potentially lead to system instability or memory corruption under specific hardware configurations.
Technical details
A logic error exists in the tegra124-emc driver within the Linux kernel's memory management subsystem. Specifically, in the tegra_emc_prepare_timing_change function, the check for whether a memory timing configuration enables the Delay-Locked Loop (DLL) in the EMRS register was reversed. According to hardware specifications, the DLL is enabled when bit A0 is low, but the code previously checked for a high bit. This could result in incorrect DLL_CHANGE_ON or DLL_CHANGE_OFF states being signaled during timing transitions. The vulnerability is addressed by correcting the bitwise logic check. Exploitation would likely require local access and the ability to trigger memory timing changes, potentially leading to system instability.
Affected products
- Linux Linux Kernel Tegra124 EMC driver
Timeline
- 2026-01-26: disclosed: Initial patch submitted by NVIDIA developer
- 2026-06-24: advisory: CVE-2026-53045 published
References
- https://git.kernel.org/stable/c/05f138fc7e27ee8e7a83ccf966c3fa26cda44dda
- https://git.kernel.org/stable/c/1793249c067a4b28e1aba0ad0e4d73aa9f9e165a
- https://git.kernel.org/stable/c/1ebbbef47d11cc90219c081492ccf995aaa3e9b3
- https://git.kernel.org/stable/c/2369b1831161356e1bcb51385d3e532dc4fe2771
- https://git.kernel.org/stable/c/7e19e72f306484996c52ff96cc92f69b78ed5435
- https://git.kernel.org/stable/c/9597ab9a8296ab337e6820f8a717ff621078b632
- https://git.kernel.org/stable/c/a85967331144fde9300be38bb44d2558eb6b742e