CVE-2026-53045: Linux kernel tegra124-emc memory driver DLL check logic error
A logic error in the Linux kernel's tegra124-emc memory driver reversed the check for whether the DLL is enabled in the EMRS register. The upstream stable commits correct this condition in several kernel branches. The CNA rates the record 9.8 critical, but the record gives no impact detail that explains that score.
Overview
The Linux kernel's tegra124-emc memory driver contained a check that decides whether the DLL is enabled in the EMRS register for a given memory timing. According to the record, the check was reversed: the DLL is enabled when bit A0 is low. The fix corrects the condition in the stable kernel branches listed in the NVD entry.
Impact
The record describes a logic error in driver code. It does not describe a specific security consequence such as code execution, privilege escalation or information disclosure. The CNA assigned a CVSS 3.1 base score of 9.8 with network attack vector, no privileges and no user interaction, but the record does not explain how that score was reached.
Affected products and versions
- Product listed: Linux Linux Kernel
- Ranges listed: from 4.2 up to but not including 5.10.258; from 5.11 up to but not including 5.15.209; from 5.16 up to but not including 6.1.175; from 6.2 up to but not including 6.6.141; from 6.7 up to but not including 6.12.91; from 6.13 up to but not including 6.18.33; from 6.19 up to but not including 7.0.10
- Fixed commits are linked in the record's references, including stable commit 9597ab9.
Exploitation status
CISA KEV does not list this CVE. No confirmed exploitation appears in the sources consulted.
Remediation and mitigation
- Update to a stable kernel release that contains the upstream fix for your branch, using the ranges above as a guide.
- Check whether your kernel build includes the tegra124-emc driver before prioritizing the update.
- The record does not describe a workaround. Treat kernel updates as the primary remediation.
Detection guidance
- Inventory kernel versions on hosts and compare them with the listed affected ranges.
- Confirm whether the tegra124-emc driver is present in your build or on Tegra124-based hardware. This relevance is an inference from the driver name.
- The record does not provide detection signatures or indicators of compromise.
Limitations of the available information
The record has no CWE, EPSS, SSVC or KEV data. The title field was empty and the title used here was written from the description. The record does not explain the 9.8 score or describe the practical effect of the reversed check on running systems.
Frequently asked questions
What does this vulnerability change in the Linux kernel?
The fix corrects a reversed check in the tegra124-emc memory driver that decides whether the DLL is enabled in the EMRS register. The record states that the DLL is enabled when bit A0 is low.
Is this CVE known to be exploited?
CISA KEV does not list it, and no confirmed exploitation appears in the sources consulted.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.