CVE-2026-80902
Received Received - Intake

Linux Kernel DMA Descriptor Leak in Sun6i DMA Engine

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA When terminating DMA transfers, active descriptors are not properly reclaimed. Only cyclic descriptors were handled, leaving non-cyclic descriptors and their LLI chains to be permanently leaked. Fix by using vchan_terminate_vdesc() which handles both cyclic and non-cyclic descriptors by adding them to desc_terminated queue for proper cleanup. Add pchan->desc != pchan->done check to prevent double-adding completed descriptors, which would corrupt the list.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-05
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-80902
EUVD
EUVD-2026-71652

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of DMA (Direct Memory Access) descriptors during termination of DMA transfers. When terminating transfers, active descriptors are not fully reclaimed, leading to memory leaks. The issue affects both cyclic and non-cyclic descriptors, causing their LLI chains to remain permanently allocated.

Detection Guidance

This vulnerability is specific to the Linux kernel's DMA engine driver (sun6i-dma) and does not have network-based detection methods. To detect it, check if your system uses the affected kernel version and inspect DMA operations for descriptor leaks during termination. Commands like dmesg or journalctl may show DMA-related errors after termination attempts.

Impact Analysis

This vulnerability may cause system resource exhaustion due to memory leaks from unreclaimed DMA descriptors. It could lead to degraded performance, crashes, or instability in systems relying on DMA operations, particularly those using the sun6i-dma controller.

Mitigation Strategies

Apply the kernel patch that fixes the sun6i-dma descriptor leak issue. Update your Linux kernel to a version that includes the fix for CVE-2026-80902. Monitor DMA operations for descriptor leaks after applying the patch.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80902. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart