CVE-2026-72149
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra: Fix burst size calculation Currently, the Tegra GPC DMA hardware requires the transfer length to be a multiple of the max burst size configured for the channel. When a client requests a transfer where the length is not evenly divisible by the configured max burst size, the DMA hangs with partial burst at the end. Fix this by reducing the burst size to the largest power-of-2 value that evenly divides the transfer length. For example, a 40-byte transfer with a 16-byte max burst will now use an 8-byte burst (40 / 8 = 5 complete bursts) instead of causing a hang. This issue was observed with the PL011 UART driver where TX DMA transfers of arbitrary lengths were stuck.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72149
EUVD
EUVD-2026-58907

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the Tegra GPC DMA hardware. When a transfer length is not a multiple of the configured max burst size, the DMA hangs with a partial burst at the end. The fix reduces the burst size to the largest power-of-2 value that divides the transfer length evenly.

Detection Guidance

This vulnerability is specific to the Linux kernel's Tegra DMA engine and may cause system hangs during DMA transfers. Detection requires checking kernel logs for DMA-related errors or hangs, particularly during high-throughput operations like UART DMA transfers. Monitor for partial burst errors or system freezes during DMA operations.

Impact Analysis

This vulnerability can cause system hangs or crashes when DMA transfers of arbitrary lengths are attempted, particularly affecting devices like the PL011 UART driver. Systems using Tegra GPC DMA may experience partial transfers that freeze the hardware.

Mitigation Strategies

Apply the kernel patch that fixes the burst size calculation in the Tegra DMA engine. Update to a Linux kernel version that includes this fix. If immediate patching is not possible, avoid using DMA for transfers that may not align with burst size requirements, particularly for UART TX operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72149. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart