Skip to main content

Linux Kernel EUVDEUVD-2026-58906

| CVE-2026-72148 HIGH
2026-08-15 416baaa9-dc9f-4396-8d5f-8c081fb06d67 GHSA-wjmg-69jj-9p9g
8.8
CVSS 3.1 · Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Share

Severity by source

Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY
8.8 HIGH
AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
vuln.today AI
5.3 MEDIUM

Local driver invocation with race-condition timing (AC:H) and at least low privilege needed to initiate DMA; no confidentiality impact from register corruption.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
SUSE
4.7 MEDIUM
AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Red Hat
5.5 MEDIUM
qualitative

Primary rating from Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67).

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
High

Lifecycle Timeline

5
Analysis Generated
Aug 17, 2026 - 07:16 vuln.today
CVSS changed
Aug 17, 2026 - 06:22 NVD
8.8 (HIGH)
Patch available
Aug 15, 2026 - 07:20 EUVD
CVE Published
Aug 15, 2026 - 06:21 cve.org
UNKNOWN (no severity yet)
CVE Published
Aug 15, 2026 - 06:21 cve.org
HIGH 8.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

The DONE_INT_MASK and ABORT_INT_MASK registers are shared by all DMA channels, and modifying them requires a read-modify-write sequence. Because this operation is not atomic, concurrent calls to dw_edma_v0_core_start() can introduce race conditions if two channels update these registers simultaneously.

Add a spinlock to serialize access to these registers and prevent race conditions.

[den: update dw_edma.lock comment]

AnalysisAI

Race condition in the Linux kernel's DesignWare eDMA (dw-edma) driver exposes DONE_INT_MASK and ABORT_INT_MASK interrupt registers to concurrent corruption when multiple DMA channels are started simultaneously. Systems running Linux kernel versions since commit 7e4b8a4fbe2c and equipped with DesignWare eDMA hardware - common in PCIe-attached peripherals and certain SoC platforms - are affected across stable branches from 6.1 through 7.1. No public exploit has been identified and EPSS sits at 0.21% (12th percentile), consistent with a hardware-specific driver flaw; however, the kernel maintainers have shipped patches across all active stable series, and remediation should be prioritized where this DMA controller is in use.

Technical ContextAI

The DesignWare Enhanced DMA (dw-edma) engine is a hardware IP block frequently embedded in PCIe endpoint controllers and used on platforms where the Linux dmaengine subsystem manages channel setup via the dw_edma_v0_core_start() function. The DONE_INT_MASK and ABORT_INT_MASK registers are memory-mapped hardware registers shared across all DMA channels on a given controller instance. Because the driver performed a non-atomic read-modify-write sequence - reading the current mask, ORing in or clearing the relevant channel bit, then writing back - two kernel threads or interrupt contexts racing to start separate DMA channels could read the same stale register value simultaneously, each write back a partial update, and thereby silently drop interrupt mask bits for one or both channels. This is a classic CWE-362 (Concurrent Execution Using Shared Resource with Improper Synchronization) pattern at the MMIO register level. The fix serializes the read-modify-write with a spinlock added to the dw_edma structure, preventing simultaneous access.

RemediationAI

The primary remediation is to upgrade to a patched kernel version: 6.1.178, 6.6.145, 6.12.97, 6.18.40, or 7.1.5 depending on the stable branch in use; 7.2-rc1 also contains the fix. Patch commits are available at git.kernel.org/stable - specifically commits 21a9834f56d6, 1553ca96e9df, 3ee0f478bb29, ddbc4a8a4fe2, 8ffba0171c6b, and 2247cc25a91f. For systems where immediate kernel upgrade is not feasible, a targeted workaround is to avoid concurrent initiation of multiple DMA channels on the affected dw-edma controller; however, this is an application-layer constraint that may not be enforceable in all deployments and could degrade DMA throughput. Disabling the dw-edma driver module entirely (if the hardware is not actively used) via kernel module blacklisting removes the exposure with no security side effects, though it disables the DMA offload functionality. Systems not equipped with DesignWare eDMA hardware are not affected and require no action.

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise High Availability Extension 16.0 Not-Affected

Share

EUVD-2026-58906 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy