CVE-2026-72148

CVE-2026-72148

High · published August 15, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

The DONE_INT_MASK and ABORT_INT_MASK registers are shared by all DMA

channels, and modifying them requires a read-modify-write sequence.

Because this operation is not atomic, concurrent calls to

dw_edma_v0_core_start() can introduce race conditions if two channels

update these registers simultaneously.

Add a spinlock to serialize access to these registers and prevent race

conditions.

[den: update dw_edma.lock comment]

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.8th percentile
Published
2026-08-15T10:21Z
References (8)
EPSS history
Timeline
  • 15 AUG 05:53Z
    dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
    cvelistv5