CVE-2026-53045: memory: tegra124-emc: Fix dll_change check

Synopsis

A logic-inversion bug in the Linux kernel's Tegra124 external memory controller (EMC) driver causes incorrect DLL (delay-locked loop) enable/disable handling during memory frequency transitions. The flaw is reachable over the network with no authentication required and no user interaction needed. Successful exploitation gives an attacker full read, write, and availability impact on the affected system. A patched-image rebuild at the fix commit is available on HarborGuard for environments running an affected kernel version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the service over the network; no local or physical access is required (AV:N).

• AuthenticationNot required

  No credentials or session token are needed to attempt exploitation (PR:N).

• Victim interactionNot required

  The attack completes without any action from a logged-in user or administrator (UI:N).

• Attack complexityDetail

  Exploitation is reliable and imposes no special preconditions such as race conditions or memory-layout dependencies (AC:L).

Blast Radius

• A successful attacker reads arbitrary kernel memory, exposing stored secrets, session tokens, and sensitive process data.
• A successful attacker writes to kernel memory, allowing modification of persisted data structures or injection of malicious content.
• A successful attacker crashes or destabilizes the affected system, causing a denial-of-service condition for all workloads on the host.
• Because the flaw sits in a memory controller driver, exploitation during a frequency-scaling event can corrupt memory state across multiple running processes simultaneously.