dmaengine: sh: rz-dmac: Move interrupt request after everything is set up

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-72146
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-08-15 06:21:32 UTC
Updated2026-08-19 17:21:00 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once the interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel->ch_base, which is initialized only after requesting the IRQ, this may lead to invalid memory access. Likewise, the IRQ thread may access uninitialized data (the ld_free, ld_queue, and ld_active lists), which may also lead to issues. Request the interrupts only after everything is set up. To keep the error path simpler, use dmam_alloc_coherent() instead of dma_alloc_coherent().

Risk And Classification

Primary CVSS: v3.1 8.4 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001800000 probability, percentile 0.079010000 (date 2026-08-19)

VersionSourceTypeScoreSeverityVector
3.1416baaa9-dc9f-4396-8d5f-8c081fb06d67Secondary8.4HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1CNADECLARED8.4HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 5000d37042a61ca556fde2782ca40dbfa802ea16 d24d53323e817d79a4bd111bd10b34dbc96e64a8 git Not specified
CNA Linux Linux affected 5000d37042a61ca556fde2782ca40dbfa802ea16 0e0c5b3cf374ebf3c589741751e1fbc67f53ec2f git Not specified
CNA Linux Linux affected 5000d37042a61ca556fde2782ca40dbfa802ea16 5b12de6229d662864ee22c11d4876652b40120f0 git Not specified
CNA Linux Linux affected 5000d37042a61ca556fde2782ca40dbfa802ea16 2a4d9e2234c3f817bb0ddbc8680d09ce9be84f93 git Not specified
CNA Linux Linux affected 5000d37042a61ca556fde2782ca40dbfa802ea16 ec9f66c91bffdb69d309bae6dfb387562db7ebc8 git Not specified
CNA Linux Linux affected 5000d37042a61ca556fde2782ca40dbfa802ea16 07ae600bd353b22f31a8f1007269744fafc7f123 git Not specified
CNA Linux Linux affected 5000d37042a61ca556fde2782ca40dbfa802ea16 731712403ddb39d1a76a11abf339a0615bc85de7 git Not specified
CNA Linux Linux affected 5.15 Not specified
CNA Linux Linux unaffected 5.15 semver Not specified
CNA Linux Linux unaffected 5.15.216 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.183 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.148 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.101 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.42 6.18.* semver Not specified
CNA Linux Linux unaffected 7.1.5 7.1.* semver Not specified
CNA Linux Linux unaffected 7.2 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/5b12de6229d662864ee22c11d4876652b40120f0 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/2a4d9e2234c3f817bb0ddbc8680d09ce9be84f93 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/ec9f66c91bffdb69d309bae6dfb387562db7ebc8 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d24d53323e817d79a4bd111bd10b34dbc96e64a8 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/0e0c5b3cf374ebf3c589741751e1fbc67f53ec2f 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/07ae600bd353b22f31a8f1007269744fafc7f123 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/731712403ddb39d1a76a11abf339a0615bc85de7 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report