Critical Vulnerability in Linux Package: IOMMU Stream ID Misconfiguration
Summary
DEBIAN-CVE-2025-21663: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" (SID) to be written to the... Affects linux versions < 6.12.10-1. Fixed in 6.12.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential functionalities such as process management, memory management, and hardware abstraction. It is widely used in various environments, from servers to embedded systems. The vulnerability in question affects the Linux package in Debian versions 13 and 14, specifically related to Nvidia's Tegra MGBE controllers, which require proper configuration of the IOMMU Stream ID for optimal performance.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the net: stmmac driver for Nvidia's Tegra MGBE controllers. The driver is hardcoded to use the Stream ID of MGBE0 for all controllers, leading to potential softirq timeouts and kernel panics when using controllers other than MGBE0. This misconfiguration can result in severe network disruptions and system instability, as evidenced by various error messages logged during operation.
How To Fix
Minimum fixed version
6.12.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to avoid using the affected Tegra MGBE controllers until the patch is applied.
Conclusion
In summary, the identified vulnerability in the Linux package related to Nvidia's Tegra MGBE controllers poses significant risks to system stability and network performance. It is crucial for users to update to the patched version to mitigate these risks effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a misconfiguration in the Linux kernel's driver for Nvidia's Tegra MGBE controllers, which can lead to system instability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Failure to address this vulnerability may result in network disruptions, system crashes, and overall instability of the affected systems.
Yes, you need to update to version 6.12.10-1 or later to ensure that the vulnerability is patched.
If immediate updating is not possible, consider avoiding the use of the affected Tegra MGBE controllers until the patch is applied.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
