CVE-2026-72146

Received Received - Intake

Race Condition in Linux Kernel DMA Engine

Publication date: 2026-08-15

Last updated on: 2026-08-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel->ch_base, which is initialized only after requesting the IRQ, this may lead to invalid memory access. Likewise, the IRQ thread may access uninitialized data (the ld_free, ld_queue, and ld_active lists), which may also lead to issues. Request the interrupts only after everything is set up. To keep the error path simpler, use dmam_alloc_coherent() instead of dma_alloc_coherent().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-19

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72146

EUVD

EUVD-2026-58904

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's DMA engine for the RZ DMA controller. It occurs because the interrupt handler is requested before all necessary data structures are initialized. This can lead to invalid memory access when the interrupt handler runs and tries to access uninitialized channel data or lists.

Detection Guidance

This vulnerability is specific to the Linux kernel's DMA engine for the RZ-DMAC driver. Detection requires checking kernel logs for DMA-related errors or crashes, particularly during driver initialization. Look for messages like invalid memory access or uninitialized data access in dmesg or system logs. No direct network detection is applicable as this is a local kernel issue.

Impact Analysis

This vulnerability may cause system crashes, data corruption, or unexpected behavior due to invalid memory access. It could lead to kernel panics or security issues if exploited maliciously.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel memory access issue that could lead to system instability or crashes but does not involve data breaches or unauthorized access to sensitive information.

Mitigation Strategies

Apply the latest kernel update or patch that includes the fix for this vulnerability. If a patch is not available, avoid using the affected RZ-DMAC driver or disable it if possible. Monitor kernel logs for any DMA-related errors after applying updates.

Hi! I’m here to help you understand CVE-2026-72146. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70