CVE-2026-72147

dmaengine: dw-edma-pcie: Reject devices without driver data

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Oct 30, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma-pcie: Reject devices without driver data

dw_edma_pcie_probe() treats the PCI device ID driver_data as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can match the driver without that data, which leads to a NULL pointer dereference.

Reject such matches before enabling the device.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to before 69bf416b31e2dc44aa8a10e7a215ad388994c7c6Affected
  • 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to before 2733b5dcb5a4ba4446f7bac954b97e4501dcaa64Affected
  • 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to before a1042599fa8f9e313be176eb1ea1ae199f983419Affected
  • 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to before 043acb00e4edd4b9ffb9dd0e357482dcd9086486Affected
  • 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to before 044f7b3252d4fb2143d4999eec2800c08f1001edAffected
  • 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 to before 11d7cfe0c119691b2dafbb699bbca90258c678aaAffected
LinuxLinux
  • 5.3Affected
  • before 5.3Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.