Riskcovery

CVE-2026-97412

pds_core: quiesce DMA before freeing resources

State
Published
Severity
Not scored
Published
Sep 24, 2026
Updated
Oct 21, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pds_core: quiesce DMA before freeing resources

pdsc_teardown() frees DMA buffers but does not disable bus mastering, leaving the device able to perform DMA after the buffers are freed. This can lead to use-after-free if the device writes to freed memory.

Add pci_clear_master() to pdsc_teardown() to disable bus mastering before freeing resources, ensuring all DMA is quiesced.

Add pci_set_master() to pdsc_setup() to re-enable bus mastering, which is needed for the firmware recovery path since pdsc_teardown() now disables it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 45d76f492938cdc27ddadc16e1e75103f4cfbf56 to before 84fc3f30b87e06a11d1807cd385603522610ed40Affected
  • 45d76f492938cdc27ddadc16e1e75103f4cfbf56 to before cc8beb70e70fc90e54efdbc1128cf7de799e6be4Affected
  • 45d76f492938cdc27ddadc16e1e75103f4cfbf56 to before 9eee6b90bee3df496ed9094d9e76d5e478d72d0aAffected
  • 45d76f492938cdc27ddadc16e1e75103f4cfbf56 to before 6443f4f20bdae726fe01cf5946fba9742a0ffda6Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.