CVE-2026-72148

HighCVSS 8.8/10Last modified Aug 23, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

The DONE_INT_MASK and ABORT_INT_MASK registers are shared by all DMA channels, and modifying them requires a read-modify-write sequence. Because this operation is not atomic, concurrent calls to dw_edma_v0_core_start() can introduce race conditions if two channels update these registers simultaneously.

Add a spinlock to serialize access to these registers and prevent race conditions.

[den: update dw_edma.lock comment]

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 7e4b8a4fbe2cecab0959e862604803d063f50029, < 3989b4775bc2cdbdb4ddc4b1d2420a82b40913f2; >= 7e4b8a4fbe2cecab0959e862604803d063f50029, < f60c7463d44fbc1585d247d0bd6976f7a1099472; >= 7e4b8a4fbe2cecab0959e862604803d063f50029, < 2247cc25a91fb1b5b86586ed55fdd5b725a7477c; >= 7e4b8a4fbe2cecab0959e862604803d063f50029, < 3ee0f478bb29b4ee892b178179a9a76ddd194149; >= 7e4b8a4fbe2cecab0959e862604803d063f50029, < 21a9834f56d6249aaa6ca7c2d8c182d66c48c3e1; >= 7e4b8a4fbe2cecab0959e862604803d063f50029, < ddbc4a8a4fe296f1fa2e59f7d176fc7c773df640; >= 7e4b8a4fbe2cecab0959e862604803d063f50029, < 1553ca96e9df158d8f37137cf4bf5fb0dc981d94; >= 7e4b8a4fbe2cecab0959e862604803d063f50029, < 8ffba0171c6bbce5f093c6dba5a02c0805b31203
LinuxLinux5.3

References

Timeline

Published
Aug 15, 2026
Last modified
Aug 23, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-721497.5In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC CVE-2026-72157.3A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0. This issue affects the function launch_vmd_gui_tool of the file mcp_seCVE-2026-72150In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix uninitialized xprt_create_args structure The xprt_create_aCVE-2026-721518.4In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salCVE-2026-72152In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() wait_event_iCVE-2026-72153In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbar_domain_free() crossbarCVE-2026-721547.8In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jump_label smp syncing The original commit 8c30b0018f9d CVE-2026-72155In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the CVE-2026-72156In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_heaCVE-2026-721578.8In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding frame_count tbnet_pCVE-2026-72158In the Linux kernel, the following vulnerability has been resolved: fpga: dfl: add bounds check in dfh_get_param_size() dfh_get_param_sizeCVE-2026-72159In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with i_size and zero i_clusters On a
CVE-2026-72148: High severity, CVSS 8.8 | Vulnix