CVE-2026-98343

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() When dma_device_put() drops the last reference on chan->device->ref, dma_device_release() runs and may free the dma_device along with its channels. dma_chan_put() then still reads chan->device->owner via dma_chan_to_owner() for the trailing module_put(). KASAN catches it: slab-use-after-free in dma_chan_put+0x3e6/0x4c0 Read of size 8 by task insmod/6319 Freed by task 6319: kfree+0x225/0x470 dma_chan_put+0x395/0x4c0 dmaengine_put+0xf8/0x160 Cache the module owner in dma_chan_put() before the put so the trailing module_put() does not need chan->device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98343

EUVD

EUVD-2026-93328

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	8ad342a863590b24ce77681b7e081363fb3333f7
Linux	Linux	8ad342a863590b24ce77681b7e081363fb3333f7
Linux	Linux	8ad342a863590b24ce77681b7e081363fb3333f7
Linux	Linux	8ad342a863590b24ce77681b7e081363fb3333f7
Linux	Linux	8ad342a863590b24ce77681b7e081363fb3333f7
Linux	Linux	8ad342a863590b24ce77681b7e081363fb3333f7
Linux	Linux	8ad342a863590b24ce77681b7e081363fb3333f7
Linux	Linux	8ad342a863590b24ce77681b7e081363fb3333f7
Linux	Linux	5.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in the Linux kernel's DMA engine subsystem. It occurs when the last reference to a DMA channel's device is dropped, causing the device and its channels to be freed. However, the code later attempts to access the freed device's owner field, leading to a use-after-free error detected by KASAN.

Detection Guidance

This vulnerability is specific to the Linux kernel's DMA engine and may not have direct network detection methods. Monitor kernel logs for slab-use-after-free errors related to dma_chan_put or dma_device_put using commands like dmesg | grep -i "slab-use-after-free" or journalctl -k | grep -i "dma_chan_put". Check for crashes or kernel panics during DMA operations.

Impact Analysis

This vulnerability could cause system instability, crashes, or potential privilege escalation if exploited. It may lead to kernel memory corruption, resulting in unpredictable behavior or denial of service on affected systems running vulnerable Linux kernel versions.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a use-after-free issue in the Linux kernel's DMA engine. Compliance impacts would depend on system-specific implementations and data processing activities rather than this technical flaw.

Mitigation Strategies

Apply the latest Linux kernel patches or updates that address this issue. If a patch is unavailable, consider disabling or restricting DMA operations if not critical. Monitor kernel logs for related errors and report any crashes to your Linux distribution vendor.

Hi! I’m here to help you understand CVE-2026-98343. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70