CVE-2026-98324

A flaw was found in the Linux kernel's PXA Direct Memory Access DMA driver. A local user could trigger a Denial of Service DoS or memory corruption due to descriptor double-counting during allocation. When processing hardware descriptors, the driver incorrectly increments the descriptor counter,...

ROS-20260930-73-0028

The vulnerability of the tiam335xxbarrouteallocate function in the drivers/dma/ti/dma-crossbar.c module of the Linux kernel’s DMA driver relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to cause service...

ROS-20260930-73-0030

The vulnerability of the lpc18xxdmamuxreserve function in the drivers/dma/lpc18xx-dmamux.c file of the Linux kernel’s DMA driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...

ROS-20260930-73-0043

The vulnerability of the opmapdmaprobe function in the drivers/dma/ti/omap-dma.c file of the Linux kernel’s DMA driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentialit...

ROS-20260930-73-0029

The vulnerability of the stm32dmamuxrouteallocate function in the drivers/dma/stm32/stm32-dmamux.c file of the Linux kernel’s DMA driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to compromise th...

CVE-2026-80902 dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA When terminating DMA transfers, active descriptors are not properly reclaimed. Only cyclic descriptors were handled, leaving non-cyclic descriptors and their LLI...

PT-2026-86193

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sun6i-dma component of the dmaengine where active descriptors are not properly reclaimed during the termination of DMA transfers. While cyclic descriptors were...

SUSE CVE-2026-72146

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is initialized only afte...

Vulnerability of functions udma_check_tx_completion(), udma_ring_irq_handler(), udma_udma_irq_handler(), and udma_tx_status() in the driver/dma/ti/k3-udma.c module of the Linux kernel’s DMA engine. This vulnerability allows an attacker to cause a service failure.

The vulnerabilities of the functions udmachecktxcompletion, udmaringirqhandler, udmaudmairqhandler, and udmatxstatus in the driver/dma/ti/k3-udma.c module of the Linux kernel’s DMA engine are related to integer overflows. Exploitation of these vulnerabilities could allow an attacker to cause a...

The vulnerability of the mmp_pdma_residue() function in the drivers/dma/mmp_pdma.c file of the Linux operating system’s DMA driver kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mmppdmaresidue function in the drivers/dma/mmppdma.c file of the Linux kernel’s DMA driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

UBUNTU-CVE-2026-72146

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is initialized only afte...

The vulnerability of the pt_issue_pending() function in the drivers/dma/ptdma/ptdma-dmaengine.c file of the Linux kernel’s DMA driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ptissuepending function in the drivers/dma/ptdma/ptdma-dmaengine.c file of the Linux kernel’s DMA driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the spi-dw-dma driver. When this driver encounters an error, the device may not send the current messag...

The vulnerability of the xdma_channel_isr() function in the drivers/dma/xilinx/xdma.c module of the Linux kernel’s DMA driver support allows a attacker to cause a service failure.

The vulnerability of the xdmachannelisr function in the drivers/dma/xilinx/xdma.c file of the Linux kernel’s DMA driver support module is related to the lack of synchronization. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the function of_k3_udma_glue_parse_chn_by_id() in the driver/dma/ti/k3-udma-glue.c module of the Linux kernel’s DMA driver allows a hacker to cause a service failure.

The vulnerability of the function ofk3udmaglueparsechnbyid in the drivers/dma/ti/k3-udma-glue.c file of the DMA driver for the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the axi_chan_block_xfer_complete() function in the drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c file of the Linux kernel’s DMA driver software allows a hacker to cause a service failure.

The vulnerability of the axichanblockxfercomplete function in the drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c file of the Linux kernel’s DMA driver software is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the rzn1_dmamux_route_allocate() function in the drivers/dma/dw/rzn1-dmamux.c module of the Linux operating system’s DMA driver allows a attacker to cause a service failure.

The vulnerability of the rzn1dmamuxrouteallocate function in the drivers/dma/dw/rzn1-dmamux.c driver of the Linux kernel’s DMA engine is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the lpc18xx_dmamux_reserve() function in the driver/dma/lpc18xx-dmamux.c file of the Linux operating system’s DMA engine driver allows a hacker to cause a service failure.

The vulnerability of the lpc18xxdmamuxreserve function in the drivers/dma/lpc18xx-dmamux.c file of the Linux kernel’s DMA driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerabilities of the functions sf_pdma_alloc_desc() and sf_pdma_desc_residue() in the drivers/dma/sf-pdma/sf-pdma.c module of the Linux kernel’s DMA driver software allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions sfpdmaallocdesc and sfpdmadescresidue in the drivers/dma/sf-pdma/sf-pdma.c module of the Linux kernel’s DMA driver lies in the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

PT-2025-54110

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Fix refcount leak in erdma mmap rdma user mmap entry get take reference, we should release it when not need anymore, add the missing rdma user mmap entry put in the error path to fix it...