CVE-2026-72476: dmaengine: Fix possible use after free
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: Fix possible use after free
In dmareleasechannel(), check chan->device->privatecnt after call dmachanput(). However, dmachanput() call dmadeviceput() which could release the last reference of the device if the DMA provider is already gone and hence free it.
Fixes it by moving dmachanput() after the check.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the Linux kernel fix for "dmaengine: Fix possible use after free" by incorporating the change that moves dma_chan_put() after the check, and in dma_release_channel() check chan->device->privatecnt after the call, so that the last reference of the device is released only when the DMA provider is already gone and the device isn’t freed prematurely.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72476?
CVE-2026-72476 has a risk rating of 46.
What is the nature of CVE-2026-72476?
CVE-2026-72476 is a use after free vulnerability in the Linux kernel's dmaengine subsystem.
How do I fix CVE-2026-72476?
To resolve CVE-2026-72476, ensure that the Linux kernel is updated to the latest version where this vulnerability has been patched.
Which component is affected by CVE-2026-72476?
CVE-2026-72476 affects the dmaengine component of the Linux kernel.
When was CVE-2026-72476 published?
CVE-2026-72476 was published on August 15, 2026.