CVE-2026-72146
kernel: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's dmaengine component. A race condition exists where an interrupt handler or thread may attempt to access uninitialized data structures immediately after an interrupt is requested but before proper initialization. This can lead to invalid memory access, potentially causing system instability or denial of service.
Statement
This vulnerability is rated as Moderate impact because triggering the race condition requires local system access on hardware utilizing specific Renesas SoC architecture, and the failure mode is confined to a denial of service without compromising system confidentiality or integrity. Red Hat Enterprise Linux products are not affected by this flaw as the vulnerable driver code is not present in supported enterprise kernels. Furthermore, typical enterprise server deployments do not run on or expose the specialized Renesas embedded hardware required by this driver.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-824 · Access of Uninitialized Pointer