CVE Database›Document archive›CVE-2026-72474

CVE-2026-72474

kernel: dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 15, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's dma-axi-dmac component. Under specific conditions on architectures like Microblaze or arm64, a memory management error can occur when the system attempts to free Direct Memory Access (DMA) coherent memory from a soft interrupt (softirq) context. This improper operation triggers a kernel bug, which can lead to a system crash and a Denial of Service (DoS).

Statement

Red Hat rates this vulnerability as Moderate because exploitation requires local access and specialized hardware, limiting the blast radius to a denial of service on specific embedded platforms. The targeted AXI DMA controller driver is designed for FPGA-based architectures not typically deployed in enterprise environments. Additionally, Red Hat Enterprise Linux releases do not include the vulnerable code.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-663 · Use of a Non-reentrant Function in a Concurrent Context