{"id":"CVE-2026-72148","summary":"dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK\n\nThe DONE_INT_MASK and ABORT_INT_MASK registers are shared by all DMA\nchannels, and modifying them requires a read-modify-write sequence.\nBecause this operation is not atomic, concurrent calls to\ndw_edma_v0_core_start() can introduce race conditions if two channels\nupdate these registers simultaneously.\n\nAdd a spinlock to serialize access to these registers and prevent race\nconditions.\n\n[den: update dw_edma.lock comment]","modified":"2026-08-25T03:51:31.170528249Z","published":"2026-08-15T05:53:19.921Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72148.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1553ca96e9df158d8f37137cf4bf5fb0dc981d94"},{"type":"WEB","url":"https://git.kernel.org/stable/c/21a9834f56d6249aaa6ca7c2d8c182d66c48c3e1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2247cc25a91fb1b5b86586ed55fdd5b725a7477c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3989b4775bc2cdbdb4ddc4b1d2420a82b40913f2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3ee0f478bb29b4ee892b178179a9a76ddd194149"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8ffba0171c6bbce5f093c6dba5a02c0805b31203"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ddbc4a8a4fe296f1fa2e59f7d176fc7c773df640"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f60c7463d44fbc1585d247d0bd6976f7a1099472"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72148.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72148"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"7e4b8a4fbe2cecab0959e862604803d063f50029"},{"fixed":"3989b4775bc2cdbdb4ddc4b1d2420a82b40913f2"},{"fixed":"f60c7463d44fbc1585d247d0bd6976f7a1099472"},{"fixed":"2247cc25a91fb1b5b86586ed55fdd5b725a7477c"},{"fixed":"3ee0f478bb29b4ee892b178179a9a76ddd194149"},{"fixed":"21a9834f56d6249aaa6ca7c2d8c182d66c48c3e1"},{"fixed":"ddbc4a8a4fe296f1fa2e59f7d176fc7c773df640"},{"fixed":"1553ca96e9df158d8f37137cf4bf5fb0dc981d94"},{"fixed":"8ffba0171c6bbce5f093c6dba5a02c0805b31203"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72148.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.10.266"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.217"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72148.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H"}]}