In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma-pcie: Reject devices without driver data

dw_edma_pcie_probe() treats the PCI device ID driver_data as the
template for the controller layout and copies it unconditionally. A
device bound dynamically via sysfs can match the driver without that
data, which leads to a NULL pointer dereference.

Reject such matches before enabling the device.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00209.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 affected < 2733b5dcb5a4ba4446f7bac954b97e4501dcaa64
41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 affected < a1042599fa8f9e313be176eb1ea1ae199f983419
41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 affected < 043acb00e4edd4b9ffb9dd0e357482dcd9086486
41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 affected < 044f7b3252d4fb2143d4999eec2800c08f1001ed
41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 affected < 11d7cfe0c119691b2dafbb699bbca90258c678aa
Linux Linux affected
Version Status Constraints
5.3 affected —
0 unaffected < 5.3
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/043acb00e4edd4b9ffb9dd0e357482dcd9086486 cve-icon cve-icon
https://git.kernel.org/stable/c/044f7b3252d4fb2143d4999eec2800c08f1001ed cve-icon cve-icon
https://git.kernel.org/stable/c/11d7cfe0c119691b2dafbb699bbca90258c678aa cve-icon cve-icon
https://git.kernel.org/stable/c/2733b5dcb5a4ba4446f7bac954b97e4501dcaa64 cve-icon cve-icon
https://git.kernel.org/stable/c/a1042599fa8f9e313be176eb1ea1ae199f983419 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw_edma_pcie_probe() treats the PCI device ID driver_data as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can match the driver without that data, which leads to a NULL pointer dereference. Reject such matches before enabling the device.
Title dmaengine: dw-edma-pcie: Reject devices without driver data
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:53:19.170Z

Reserved: 2026-08-09T03:40:39.908Z

Link: CVE-2026-72147

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:32.373

Modified: 2026-08-15T06:21:32.373

Link: CVE-2026-72147

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T14:15:03Z

Weaknesses

No weakness.