CVE-2026-72148 - Vulnerability Details

- dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

The DONE_INT_MASK and ABORT_INT_MASK registers are shared by all DMA
channels, and modifying them requires a read-modify-write sequence.
Because this operation is not atomic, concurrent calls to
dw_edma_v0_core_start() can introduce race conditions if two channels
update these registers simultaneously.

Add a spinlock to serialize access to these registers and prevent race
conditions.

[den: update dw_edma.lock comment]

Published: 2026-08-15

Score: 8.8 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The dw_edma driver in the Linux kernel performs a non‑atomic read‑modify‑write on two shared register masks used for DMA interrupts. When dw_edma_v0_core_start() is called concurrently on multiple DMA channels, the missing synchronization causes a race condition that can corrupt the DONE_INT_MASK and ABORT_INT_MASK values and lead to incorrect DMA operation or system instability. This vulnerability is a race condition involving improper synchronization (CWE-820).

Affected Systems

Any Linux system running a kernel that includes the dw_edma driver before the spinlock fix is applied is vulnerable. The vendor product list indicates Linux kernels, and no version range is specified, so all affected kernels containing the driver at the time of the commit are considered susceptible until the patch is installed.

Risk and Exploitability

The CVSS base score of 8.8 reflects high severity. The EPSS score of less than 1% and the absence from the KEV catalog suggest that public exploits are unlikely. Propagation likely requires a locally running process that can initiate concurrent DMA channel starts; remote exploitation is not described in the data.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`7e4b8a4fbe2cecab0959e862604803d063f50029`	affected	< 3989b4775bc2cdbdb4ddc4b1d2420a82b40913f2
`7e4b8a4fbe2cecab0959e862604803d063f50029`	affected	< f60c7463d44fbc1585d247d0bd6976f7a1099472
`7e4b8a4fbe2cecab0959e862604803d063f50029`	affected	< 2247cc25a91fb1b5b86586ed55fdd5b725a7477c
`7e4b8a4fbe2cecab0959e862604803d063f50029`	affected	< 3ee0f478bb29b4ee892b178179a9a76ddd194149
`7e4b8a4fbe2cecab0959e862604803d063f50029`	affected	< 21a9834f56d6249aaa6ca7c2d8c182d66c48c3e1
`7e4b8a4fbe2cecab0959e862604803d063f50029`	affected	< ddbc4a8a4fe296f1fa2e59f7d176fc7c773df640
`7e4b8a4fbe2cecab0959e862604803d063f50029`	affected	< 1553ca96e9df158d8f37137cf4bf5fb0dc981d94
`7e4b8a4fbe2cecab0959e862604803d063f50029`	affected	< 8ffba0171c6bbce5f093c6dba5a02c0805b31203

Linux

affected

Version	Status	Constraints
`5.3`	affected	—
`0`	unaffected	< 5.3
`5.10.266`	unaffected	≤ 5.10.*
`5.15.217`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[7e4b8a4fbe2cecab0959e862604803d063f50029,2247cc25a91fb1b5b86586ed55fdd5b725a7477c)`	affected	code_commit	—
`[7e4b8a4fbe2cecab0959e862604803d063f50029,3ee0f478bb29b4ee892b178179a9a76ddd194149)`	affected	code_commit	—
`[7e4b8a4fbe2cecab0959e862604803d063f50029,21a9834f56d6249aaa6ca7c2d8c182d66c48c3e1)`	affected	code_commit	—
`[7e4b8a4fbe2cecab0959e862604803d063f50029,ddbc4a8a4fe296f1fa2e59f7d176fc7c773df640)`	affected	code_commit	—
`[7e4b8a4fbe2cecab0959e862604803d063f50029,1553ca96e9df158d8f37137cf4bf5fb0dc981d94)`	affected	code_commit	—
`[7e4b8a4fbe2cecab0959e862604803d063f50029,8ffba0171c6bbce5f093c6dba5a02c0805b31203)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`5.3`	affected	generic	—
`[0,5.3)`	unaffected	generic	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*)`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Upgrade to a Linux kernel release that includes the spinlock patch for the dw_edma driver.
If an updated kernel is unavailable, disable the dw_edma driver or restrict its use to trusted processes to prevent overlapping register writes.
Monitor kernel logs and DMA‑related metrics for abnormal interrupt mask changes or driver errors, and apply additional isolation measures if suspicious activity occurs.

Generated by OpenCVE AI on August 22, 2026 at 11:17 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00329.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1553ca96e9df158d8f37137cf4bf5fb0dc981d94
https://git.kernel.org/stable/c/21a9834f56d6249aaa6ca7c2d8c182d66c48c3e1
https://git.kernel.org/stable/c/2247cc25a91fb1b5b86586ed55fdd5b725a7477c
https://git.kernel.org/stable/c/3989b4775bc2cdbdb4ddc4b1d2420a82b40913f2
https://git.kernel.org/stable/c/3ee0f478bb29b4ee892b178179a9a76ddd194149
https://git.kernel.org/stable/c/8ffba0171c6bbce5f093c6dba5a02c0805b31203
https://git.kernel.org/stable/c/ddbc4a8a4fe296f1fa2e59f7d176fc7c773df640
https://git.kernel.org/stable/c/f60c7463d44fbc1585d247d0bd6976f7a1099472
https://lore.kernel.org/linux-cve-announce/2026081533-CVE-2026-72148-bdce@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-72148
https://www.cve.org/CVERecord?id=CVE-2026-72148

History

Sun, 23 Aug 2026 13:15:00 +0000

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/3989b4775bc2cdbdb4ddc4b1d2420a82b40913f2 https://git.kernel.org/stable/c/f60c7463d44fbc1585d247d0bd6976f7a1099472

Sat, 22 Aug 2026 10:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-362

Wed, 19 Aug 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-820
References		https://lore.kernel.org/linux-cve-announce/2026081533-CVE-2026-72148-bdce@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-72148 https://www.cve.org/CVERecord?id=CVE-2026-72148
Metrics	threat_severity `None`	threat_severity `Moderate`

Mon, 17 Aug 2026 21:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-362

Mon, 17 Aug 2026 19:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-362

Mon, 17 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H'}`

Sat, 15 Aug 2026 09:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-362

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK The DONE_INT_MASK and ABORT_INT_MASK registers are shared by all DMA channels, and modifying them requires a read-modify-write sequence. Because this operation is not atomic, concurrent calls to dw_edma_v0_core_start() can introduce race conditions if two channels update these registers simultaneously. Add a spinlock to serialize access to these registers and prevent race conditions. [den: update dw_edma.lock comment]
Title		dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1553ca96e9df158d8f37137cf4bf5fb0dc981d94 https://git.kernel.org/stable/c/21a9834f56d6249aaa6ca7c2d8c182d66c48c3e1 https://git.kernel.org/stable/c/2247cc25a91fb1b5b86586ed55fdd5b725a7477c https://git.kernel.org/stable/c/3ee0f478bb29b4ee892b178179a9a76ddd194149 https://git.kernel.org/stable/c/8ffba0171c6bbce5f093c6dba5a02c0805b31203 https://git.kernel.org/stable/c/ddbc4a8a4fe296f1fa2e59f7d176fc7c773df640

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:53:19.921Z

Updated: 2026-08-23T12:46:52.752Z

Reserved: 2026-08-09T03:40:39.908Z

Link: CVE-2026-72148

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:32.483

Modified: 2026-08-23T13:16:40.570

Link: CVE-2026-72148

Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72148 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-22T11:30:17Z

Weaknesses

CWE-820
Missing Synchronization

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object