CVE-2026-72148

A flaw was found in the Linux kernel's dmaengine component, specifically in the dw-edma driver. This flaw occurs because the DONE_INT_MASK and ABORT_INT_MASK registers, which are shared by all Direct Memory Access (DMA) channels, are modified using a non-atomic read-modify-write sequence. Concurrent calls to dw_edma_v0_core_start() can lead to a race condition if multiple channels attempt to update these registers simultaneously, potentially causing system instability or a denial of service.

This vulnerability is rated as Moderate severity because exploitation requires local access on systems with specific Direct Memory Access hardware and only leads to a denial of service rather than code execution or information disclosure. The issue stems from unsynchronized register updates across concurrent DMA channels within the Synopsys DesignWare eDMA controller driver. Supported Red Hat Enterprise Linux releases are not affected because the vulnerable driver code is not present in the kernel.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.