CVE-2026-72474
kernel: dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's dma-axi-dmac component. Under specific conditions on architectures like Microblaze or arm64, a memory management error can occur when the system attempts to free Direct Memory Access (DMA) coherent memory from a soft interrupt (softirq) context. This improper operation triggers a kernel bug, which can lead to a system crash and a Denial of Service (DoS).
Statement
Red Hat rates this vulnerability as Moderate because exploitation requires local access and specialized hardware, limiting the blast radius to a denial of service on specific embedded platforms. The targeted AXI DMA controller driver is designed for FPGA-based architectures not typically deployed in enterprise environments. Additionally, Red Hat Enterprise Linux releases do not include the vulnerable code.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-663 · Use of a Non-reentrant Function in a Concurrent Context