{"id":"CVE-2026-99259","kind":"vulnerability","aliases":["CVE-2026-99259"],"related":[],"title":"Linux kernel: uninitialised clock rate on 32-bit Tegra suspend path","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsoc/tegra: pmc: Fix uninitialised clock rate\n\nFor legacy 32-bit Tegra devices, the warning in the\ntegra_pmc_enter_suspend_mode() function is being triggered because the\nearly_pmc->rate variable is never configured and hence, always 0. This\nissue started occurring after updating the PMC driver to create the PMC\ncontext dynamically which causes the 'rate' to be set in the new dynamic\ncontext, but missed updating the rate in the early PMC context.\n\nFix this by initialising the early_pmc->rate variable for 32-bit Tegra\ndevices when the rate for the PMC context is initialised.\n\n[treding@nvidia.com: move assignment to existing #ifdef block]","summary":"On legacy 32-bit NVIDIA Tegra devices, the Linux kernel's power management controller driver never sets a clock rate variable, so a warning fires during suspend. The description does not state any attacker-usable effect beyond this warning.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["arm","embedded","linux-kernel","runtime","tegra"],"not_affected_if":["64-bit-tegra","non-tegra-hardware"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-03T12:17:32+00:00","first_seen_at":"2026-11-03T12:20:39+00:00","triaged_at":"2026-11-03T12:22:47+00:00","updated_at":"2026-11-03T12:22:47+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-11-03T12:22:47Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: uninitialised clock rate on 32-bit Tegra suspend path","impact":"low","summary":"On legacy 32-bit NVIDIA Tegra devices, the Linux kernel's power management controller driver never sets a clock rate variable, so a warning fires during suspend. The description does not state any attacker-usable effect beyond this warning.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["linux-kernel","tegra","arm","embedded"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown; the sources describe a spurious suspend warning only","analyst_note":"Check the kernel.org or NVD CVE record for the fixed stable version and whether any security impact beyond a warning exists.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["non-tegra-hardware","64-bit-tegra"],"who_is_affected":"Affects Linux kernels running on legacy 32-bit Tegra hardware whose power management controller driver was changed to allocate its context dynamically. Systems on other architectures or without 32-bit Tegra boards are not described as affected. unknown whether the sources name a fixed kernel version.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000676,"input_tokens":4286,"output_tokens":494,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-99259':14A,17A '0':112C '32':7A,27B,83C,160C 'alway':111C 'arm':18B 'assign':175C 'attack':59B 'attacker-us':58B 'beyond':62B 'bit':8A,28B,84C,161C 'block':179C 'caus':129C 'clock':4A,43B,79C 'configur':108C 'context':126C,139C,149C,170C 'control':38B 'creat':123C 'cve':12A,15A 'descript':53B 'devic':31B,86C,163C 'driver':39B,121C 'dynam':127C,138C 'earli':102C,147C,155C 'effect':61B 'embed':19B 'enter':93C 'exist':177C 'fire':49B 'fix':77C,150C 'follow':70C 'function':96C 'henc':110C 'ifdef':178C 'initialis':153C,172C 'issu':114C 'kernel':2A,22B,34B,68C 'legaci':26B,82C 'linux':1A,21B,33B,67C 'linux-kernel':20B 'manag':37B 'miss':141C 'mode':95C 'move':174C 'never':40B,107C 'new':137C 'nvidia':29B 'occur':116C 'path':11A 'pmc':76C,92C,103C,120C,125C,148C,156C,169C 'power':36B 'rate':5A,44B,80C,104C,131C,144C,157C,166C 'resolv':74C 'runtim':23B 'set':41B,134C 'soc/tegra':75C 'start':115C 'state':56B 'suspend':10A,51B,94C 'tegra':9A,24B,30B,85C,91C,162C 'treding@nvidia.com':173C 'trigger':99C 'uninitialis':3A,78C 'updat':118C,142C 'usabl':60B 'variabl':45B,105C,158C 'vulner':71C 'warn':48B,64B,88C","nicknames":[],"mitigations":[],"who_affected":"Affects Linux kernels running on legacy 32-bit Tegra hardware whose power management controller driver was changed to allocate its context dynamically. Systems on other architectures or without 32-bit Tegra boards are not described as affected. unknown whether the sources name a fixed kernel version.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["arm","embedded","linuxkernel","runtime","tegra","unknown"],"first_public_at":"2026-11-03T12:17:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-99259","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99259","severity":null,"published_at":"2026-11-03T12:17:32+00:00","modified_at":"2026-11-03T12:17:32+00:00","first_seen_at":"2026-11-03T12:20:39+00:00","fetched_at":"2026-11-03T12:20:39+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}