CVE-2026-72149

A flaw was found in the Linux kernel. The Tegra GPC Direct Memory Access (DMA) hardware requires transfer lengths to be a multiple of the maximum burst size. When a client requests a transfer with a length that is not evenly divisible by the configured maximum burst size, this can cause the DMA to hang, leading to a system unresponsiveness or denial of service.

This vulnerability is rated as Low severity because exploitation requires local access on systems utilizing specialized NVIDIA Tegra hardware and only leads to a denial of service. Standard enterprise architectures and systems lacking Tegra SoC peripherals do not expose this hardware controller and are not at risk. On affected hardware platforms, unaligned DMA transfer requests can stall the controller, rendering dependent peripheral devices unresponsive without compromising system confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.