In the Linux kernel, the following vulnerability has been resolved:
drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
The host1x_client_register() function is called just prior to register map
initialization loop, making the device available to userspace. This may
result in userspace attempting to submits a job before the register map is
initialized. Address this by moving register initialization before host1x
client registration.
References 5
https://git.kernel.org/stable/c/3055292b8eed69553b389a609197a241df47e68e
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/40a2a91da02c434938f0ba53877984820800b5f0
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/5db37fd7710e74bc4df48bddab8f571d0bfc6769
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/6e22d5ad61cfa38aa53fab86a530113aff6a3619
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/c4ef5ba1131346159e31f4ef858525cf377380a6
416baaa9-dc9f-4396-8d5f-8c081fb06d67