CVE-2026-93042

A flaw was found in the Linux kernel's dmaengine: dw-edma component. This vulnerability occurs because the dw-edma driver incorrectly calls a callback function after a Direct Memory Access (DMA) descriptor has been terminated. This can lead to a use-after-free condition, where the system attempts to access memory that has already been released, potentially causing system instability or allowing an attacker to execute arbitrary code. Additionally, leftover descriptors might restart into reused buffers, leading to information disclosure or data corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.