CVE-2026-93169dmaengine: zynqmp_dma: fix race between runtime PM and device removal
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: fix race between runtime PM and device removal In zynqmp_dma_remove(), runtime PM was disabled only after checking state and doing a manual suspend. This can race with runtime PM in the remove/unbind (rmmod) path. Disable runtime PM first, then suspend only if the device is not already suspended. To prevent any further runtime PM transitions.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 72dd8b2914b5db1dccf902971c2ea6b541711b28 builds before 32f69e6c95b59f9cfc649ebf352a204d23ba93d7; from 72dd8b2914b5db1dccf902971c2ea6b541711b28 before aec7cf9a5bd89047c58d5648bfce0b1bd19ba7d5; from 72dd8b2914b5db1dccf902971c2ea6b541711b28 before 516ba2d8b7aac4238f9fcbd58579c43c71b9b695 | CNA record |
References
- https://git.kernel.org/stable/c/32f69e6c95b59f9cfc649ebf352a204d23ba93d7
- https://git.kernel.org/stable/c/aec7cf9a5bd89047c58d5648bfce0b1bd19ba7d5
- https://git.kernel.org/stable/c/516ba2d8b7aac4238f9fcbd58579c43c71b9b695
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.