CVE-2026-98343: dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()
Published Oct 6, 2026
·Updated
dmaengine: fix use-after-free in dmachanput() and dmareleasechannel()
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Cache the module owner in dma_chan_put() before dma_device_put() drops the final channel-device reference, then use the cached owner for the trailing module_put() so dma_chan_put() no longer reads chan->device after dma_device_release() may have freed it.
Event History
Oct 6, 2026
CVE Published
via MITRE·08:46 AM
Data Sourced
via MITRE·08:46 AM
Description
Data Sourced
via NVD·09:18 AM
Description
Oct 7, 2026
Data Sourced
via Microsoft·08:19 AM
DescriptionSeverityWeakness