CVE-2026-72147 - Vulnerability Details

- dmaengine: dw-edma-pcie: Reject devices without driver data

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma-pcie: Reject devices without driver data

dw_edma_pcie_probe() treats the PCI device ID driver_data as the
template for the controller layout and copies it unconditionally. A
device bound dynamically via sysfs can match the driver without that
data, which leads to a NULL pointer dereference.

Reject such matches before enabling the device.

Published: 2026-08-15

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The Linux kernel’s dw_edma_pcie driver contains a flaw in the probe function: it copies the PCI device ID’s driver_data into the controller layout without verifying that this data is present. When a device that lacks driver_data is bound to the driver via sysfs, the copy operation dereferences a NULL pointer, causing a kernel panic and a system reboot. This results in a denial of service.

Affected Systems

Any Linux kernel that incorporates the dw_edma_pcie driver and has not applied the patch commit that protects against the NULL pointer dereference is affected. No specific version range is listed, so all kernel releases preceding the fix are potentially vulnerable.

Risk and Exploitability

The EPSS score is <1%, indicating a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation yet. The CVSS score of 5.5 reflects a medium severity risk. The attack vector is local: an attacker must have the ability to write to the sysfs entry /sys/bus/pci/drivers/dw_edma_pcie/bind. This typically requires privileged (root) access, so the risk is moderate to high for users with such access. If exploited, the kernel will crash, yielding a full system reboot and denial of service.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569`	affected	< 2733b5dcb5a4ba4446f7bac954b97e4501dcaa64
`41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569`	affected	< a1042599fa8f9e313be176eb1ea1ae199f983419
`41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569`	affected	< 043acb00e4edd4b9ffb9dd0e357482dcd9086486
`41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569`	affected	< 044f7b3252d4fb2143d4999eec2800c08f1001ed
`41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569`	affected	< 11d7cfe0c119691b2dafbb699bbca90258c678aa

Linux

affected

Version	Status	Constraints
`5.3`	affected	—
`0`	unaffected	< 5.3
`6.6.148`	unaffected	≤ 6.6.*
`6.12.101`	unaffected	≤ 6.12.*
`6.18.42`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569,2733b5dcb5a4ba4446f7bac954b97e4501dcaa64)`	affected	code_commit	—
`[41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569,a1042599fa8f9e313be176eb1ea1ae199f983419)`	affected	code_commit	—
`[41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569,043acb00e4edd4b9ffb9dd0e357482dcd9086486)`	affected	code_commit	—
`[41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569,044f7b3252d4fb2143d4999eec2800c08f1001ed)`	affected	code_commit	—
`[41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569,11d7cfe0c119691b2dafbb699bbca90258c678aa)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`5.3`	affected	generic	—
`[0,5.3)`	unaffected	generic	—
`[6.6.148,6.7.0.0)`	unaffected	semver	—
`[6.12.101,6.13.0.0)`	unaffected	semver	—
`[6.18.42,6.19.0.0)`	unaffected	semver	—
`[7.1.5,7.2.0.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade the Linux kernel to a release that includes the fix for the dw_edma_pcie probe NULL pointer dereference.
If a kernel upgrade is not immediately possible, limit write permissions on /sys/bus/pci and /sys/bus/pci/drivers/dw_edma_pcie to prevent unauthorized device binding. The restriction mitigates the local privilege requirement for the exploit.
Continuously monitor system logs for kernel panic events related to dw_edma_pcie and audit PCI device binding activity to detect and respond to attempted exploitation.

Generated by OpenCVE AI on August 22, 2026 at 10:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4745-1	linux-6.12 security update

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.002.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/043acb00e4edd4b9ffb9dd0e357482dcd9086486
https://git.kernel.org/stable/c/044f7b3252d4fb2143d4999eec2800c08f1001ed
https://git.kernel.org/stable/c/11d7cfe0c119691b2dafbb699bbca90258c678aa
https://git.kernel.org/stable/c/2733b5dcb5a4ba4446f7bac954b97e4501dcaa64
https://git.kernel.org/stable/c/a1042599fa8f9e313be176eb1ea1ae199f983419
https://lore.kernel.org/linux-cve-announce/2026081533-CVE-2026-72147-7d3c@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-72147
https://www.cve.org/CVERecord?id=CVE-2026-72147

History

Wed, 19 Aug 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-476
References		https://lore.kernel.org/linux-cve-announce/2026081533-CVE-2026-72147-7d3c@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-72147 https://www.cve.org/CVERecord?id=CVE-2026-72147
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw_edma_pcie_probe() treats the PCI device ID driver_data as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can match the driver without that data, which leads to a NULL pointer dereference. Reject such matches before enabling the device.
Title		dmaengine: dw-edma-pcie: Reject devices without driver data
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/043acb00e4edd4b9ffb9dd0e357482dcd9086486 https://git.kernel.org/stable/c/044f7b3252d4fb2143d4999eec2800c08f1001ed https://git.kernel.org/stable/c/11d7cfe0c119691b2dafbb699bbca90258c678aa https://git.kernel.org/stable/c/2733b5dcb5a4ba4446f7bac954b97e4501dcaa64 https://git.kernel.org/stable/c/a1042599fa8f9e313be176eb1ea1ae199f983419

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:53:19.170Z

Updated: 2026-08-17T05:09:06.340Z

Reserved: 2026-08-09T03:40:39.908Z

Link: CVE-2026-72147

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:32.373

Modified: 2026-08-17T06:18:14.800

Link: CVE-2026-72147

Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72147 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-22T10:15:04Z

Weaknesses

CWE-476
NULL Pointer Dereference

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object