CVE-2026-72146dmaengine: sh: rz-dmac: Move interrupt request after everything is set up
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel->ch_base, which is initialized only after requesting the IRQ, this may lead to invalid memory access. Likewise, the IRQ thread may access uninitialized data (the ld_free, ld_queue, and ld_active lists), which may also lead to issues. Request the interrupts only after everything is set up. To keep the error path simpler, use dmam_alloc_coherent() instead of dma_alloc_coherent().
- CVSS
- 8.4 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5000d37042a61ca556fde2782ca40dbfa802ea16 before d24d53323e817d79a4bd111bd10b34dbc96e64a8; 5000d37042a61ca556fde2782ca40dbfa802ea16 builds before 0e0c5b3cf374ebf3c589741751e1fbc67f53ec2f; 5000d37042a61ca556fde2782ca40dbfa802ea16 builds before 5b12de6229d662864ee22c11d4876652b40120f0; 5000d37042a61ca556fde2782ca40dbfa802ea16 builds before 2a4d9e2234c3f817bb0ddbc8680d09ce9be84f93; from 5000d37042a61ca556fde2782ca40dbfa802ea16 before ec9f66c91bffdb69d309bae6dfb387562db7ebc8; 5000d37042a61ca556fde2782ca40dbfa802ea16 builds before 07ae600bd353b22f31a8f1007269744fafc7f123; from 5000d37042a61ca556fde2782ca40dbfa802ea16 before 731712403ddb39d1a76a11abf339a0615bc85de7 | CNA record |
References
- https://git.kernel.org/stable/c/d24d53323e817d79a4bd111bd10b34dbc96e64a8
- https://git.kernel.org/stable/c/0e0c5b3cf374ebf3c589741751e1fbc67f53ec2f
- https://git.kernel.org/stable/c/5b12de6229d662864ee22c11d4876652b40120f0
- https://git.kernel.org/stable/c/2a4d9e2234c3f817bb0ddbc8680d09ce9be84f93
- https://git.kernel.org/stable/c/ec9f66c91bffdb69d309bae6dfb387562db7ebc8
- https://git.kernel.org/stable/c/07ae600bd353b22f31a8f1007269744fafc7f123
- https://git.kernel.org/stable/c/731712403ddb39d1a76a11abf339a0615bc85de7
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.