CVE-2026-89993dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs dw_edma_irq_request() passes struct dw_edma_irq to request_irq() before dw_edma_channel_setup() fills the back pointer. A shared interrupt can therefore enter the handler with dw_irq->dw still NULL, leading to a NULL pointer dereference. Set the back pointer before installing each handler.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf before b86280b12ccf33b68b309b7cb0e4476894dfe77c; from e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf before 07e50cef557def076418c67051a336e4c6bd50e1; from e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf before 17ef63843c0fcbf1efdfbbfb0f5584a5ea2c91ba; from e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf before d232bc6cf4562132ef50644484dfd4b23a593295; from e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf before fac202d73e7a649b7d4010325c6c6dcd9334fe65; from e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf before d91fb6c0d10dad32929dc5c6850f89df34e1bfcd; from e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf before 647217abea849d3d45f8cb0b8ee5b78d50f26985 | CNA record |
References
- https://git.kernel.org/stable/c/b86280b12ccf33b68b309b7cb0e4476894dfe77c
- https://git.kernel.org/stable/c/07e50cef557def076418c67051a336e4c6bd50e1
- https://git.kernel.org/stable/c/17ef63843c0fcbf1efdfbbfb0f5584a5ea2c91ba
- https://git.kernel.org/stable/c/d232bc6cf4562132ef50644484dfd4b23a593295
- https://git.kernel.org/stable/c/fac202d73e7a649b7d4010325c6c6dcd9334fe65
- https://git.kernel.org/stable/c/d91fb6c0d10dad32929dc5c6850f89df34e1bfcd
- https://git.kernel.org/stable/c/647217abea849d3d45f8cb0b8ee5b78d50f26985
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.