CVE-2026-72148
Description
A flaw was found in the Linux kernel's dmaengine component, specifically in the dw-edma driver. This flaw occurs because the DONE_INT_MASK and ABORT_INT_MASK registers, which are shared by all Direct Memory Access (DMA) channels, are modified using a non-atomic read-modify-write sequence. Concurrent calls to dw_edma_v0_core_start() can lead to a race condition if multiple channels attempt to update these registers simultaneously, potentially causing system instability or a denial of service.
Statement
This vulnerability is rated as Moderate severity because exploitation requires local access on systems with specific Direct Memory Access hardware and only leads to a denial of service rather than code execution or information disclosure. The issue stems from unsynchronized register updates across concurrent DMA channels within the Synopsys DesignWare eDMA controller driver. Supported Red Hat Enterprise Linux releases are not affected because the vulnerable driver code is not present in the kernel.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | 8.8 |
| Attack Vector | Local | N/A | Adjacent Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | None |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Changed |
| Confidentiality | None | N/A | Low |
| Integrity Impact | None | N/A | Low |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
