CVE-2026-72148: dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: dw-edma: Add spinlock to protect DONEINTMASK and ABORTINTMASK
The DONEINTMASK and ABORTINTMASK registers are shared by all DMA channels, and modifying them requires a read-modify-write sequence. Because this operation is not atomic, concurrent calls to dwedmav0corestart() can introduce race conditions if two channels update these registers simultaneously.
Add a spinlock to serialize access to these registers and prevent race conditions.
[den: update dwedma.lock comment]
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72148?
CVE-2026-72148 has a risk rating of 34, indicating a moderate severity level.
How do I fix CVE-2026-72148?
To fix CVE-2026-72148, update to the latest Linux kernel version that has the fix implemented.
What type of vulnerability is CVE-2026-72148?
CVE-2026-72148 is classified as a race condition vulnerability in the Linux kernel's DMA engine.
What are the affected components of CVE-2026-72148?
CVE-2026-72148 affects the DMA controller's DONE_INT_MASK and ABORT_INT_MASK registers.
What impact does CVE-2026-72148 have on system security?
CVE-2026-72148 can lead to improper handling of DMA transactions, potentially affecting system stability and data integrity.