CVE-2026-80902

dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA

State: Published
Severity: Not scored
Published: Sep 4, 2026
Updated: Sep 4, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA

When terminating DMA transfers, active descriptors are not properly reclaimed. Only cyclic descriptors were handled, leaving non-cyclic descriptors and their LLI chains to be permanently leaked.

Fix by using vchan_terminate_vdesc() which handles both cyclic and non-cyclic descriptors by adding them to desc_terminated queue for proper cleanup.

Add pchan->desc != pchan->done check to prevent double-adding completed descriptors, which would corrupt the list.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	555859308723d8d5b828304f5eb9281143fd86b5 to before bb87440561eb72b47a2b848b5373b86433b247e6Affected 555859308723d8d5b828304f5eb9281143fd86b5 to before 004a7a02982bed0a727a4ac7be400f00f353e7a2Affected 555859308723d8d5b828304f5eb9281143fd86b5 to before b150f603083cc8b72b0cbf13ec3e91f85b4390a0Affected 555859308723d8d5b828304f5eb9281143fd86b5 to before 27806fe7b9701af0963dcd510e30e7d0cc314c43Affected 555859308723d8d5b828304f5eb9281143fd86b5 to before 1ccc5c059d067c5358682ad5352e7d7e9239ed9bAffected 555859308723d8d5b828304f5eb9281143fd86b5 to before 9086b488f2737d5dcee86852b83f2059f1cdfabfAffected 555859308723d8d5b828304f5eb9281143fd86b5 to before d4ba6aa65fcd797152d3aebd428a7b2da49cd5ebAffected 555859308723d8d5b828304f5eb9281143fd86b5 to before ab1150115e68a46b687eb38c1ab92782018c9f2cAffected
LinuxLinux	3.17Affected before 3.17Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.151 through 6.6.Not affected 6.12.103 through 6.12.Not affected 6.18.44 through 6.18.Not affected 7.1.8 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

555859308723d8d5b828304f5eb9281143fd86b5 to before bb87440561eb72b47a2b848b5373b86433b247e6Affected
555859308723d8d5b828304f5eb9281143fd86b5 to before 004a7a02982bed0a727a4ac7be400f00f353e7a2Affected
555859308723d8d5b828304f5eb9281143fd86b5 to before b150f603083cc8b72b0cbf13ec3e91f85b4390a0Affected
555859308723d8d5b828304f5eb9281143fd86b5 to before 27806fe7b9701af0963dcd510e30e7d0cc314c43Affected
555859308723d8d5b828304f5eb9281143fd86b5 to before 1ccc5c059d067c5358682ad5352e7d7e9239ed9bAffected
555859308723d8d5b828304f5eb9281143fd86b5 to before 9086b488f2737d5dcee86852b83f2059f1cdfabfAffected
555859308723d8d5b828304f5eb9281143fd86b5 to before d4ba6aa65fcd797152d3aebd428a7b2da49cd5ebAffected
555859308723d8d5b828304f5eb9281143fd86b5 to before ab1150115e68a46b687eb38c1ab92782018c9f2cAffected

LinuxLinux

3.17Affected
before 3.17Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.151 through 6.6.*Not affected
6.12.103 through 6.12.*Not affected
6.18.44 through 6.18.*Not affected
7.1.8 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.