CVE-2026-72475
kernel: dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's dma-axi-dmac component. This vulnerability arises from the improper freeing of a data structure within the axi_dmac_prep_peripheral_dma_vec() function. This oversight could lead to memory corruption, potentially causing system instability or a denial of service.
Statement
This vulnerability is evaluated as having a Moderate impact because triggering the descriptor handling failure requires local access on systems equipped with specific AXI DMA hardware, limiting the potential consequence to local denial of service. The flaw cannot be exploited across the network and lacks mechanisms to compromise confidentiality or data integrity. Additionally, supported Red Hat Enterprise Linux distributions do not include the vulnerable upstream code, leaving standard enterprise environments unaffected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1341 · Multiple Releases of Same Resource or Handle