CVE-2026-72148
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
In the Linux kernel dw-edma driver, the DONE_INT_MASK and ABORT_INT_MASK registers are shared by all DMA channels, and modifying them requires a non-atomic read-modify-write sequence. This can lead to race conditions when two channels call dw_edma_v0_core_start() concurrently. A spinlock has been added to serialize access to these registers.
Risk Assessment
Race conditions may cause unpredictable behavior of the DMA controller, potentially leading to data corruption or system crashes.
Recommendation
Apply the Linux kernel update containing this patch to eliminate the race condition risk.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK The DONE_INT_MASK and ABORT_INT_MASK registers are shared by all DMA channels, and modifying them requires a read-modify-write sequence. Because this operation is not atomic, concurrent calls to dw_edma_v0_core_start() can introduce race conditions if two channels update these registers simultaneously. Add a spinlock to serialize access to these registers and prevent race conditions. [den: update dw_edma.lock comment]