CVE Database›Document archive›CVE-2026-72475

CVE-2026-72475

kernel: dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 15, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's dma-axi-dmac component. This vulnerability arises from the improper freeing of a data structure within the axi_dmac_prep_peripheral_dma_vec() function. This oversight could lead to memory corruption, potentially causing system instability or a denial of service.

Statement

This vulnerability is evaluated as having a Moderate impact because triggering the descriptor handling failure requires local access on systems equipped with specific AXI DMA hardware, limiting the potential consequence to local denial of service. The flaw cannot be exploited across the network and lacks mechanisms to compromise confidentiality or data integrity. Additionally, supported Red Hat Enterprise Linux distributions do not include the vulnerable upstream code, leaving standard enterprise environments unaffected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-1341 · Multiple Releases of Same Resource or Handle