CVE-2026-93041
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize abort state updates dw_edma_abort_interrupt() drops vc.lock before changing request and status. issue_pending() can acquire the lock in that small window, observe the old busy state, and skip starting queued descriptors. Then the abort handler overwrites the channel status as idle, leaving the new descriptors stranded for good. Keep descriptor completion and the state transition in the same critical section.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-09-17 17:17:57.250000
Last modified
2026-10-19 10:16:53.773000
View original CVE JSON
{
"id": "CVE-2026-93041",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-09-17T17:17:57.250",
"lastModified": "2026-10-19T10:16:53.773",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: dw-edma: Serialize abort state updates\n\ndw_edma_abort_interrupt() drops vc.lock before changing request and\nstatus. issue_pending() can acquire the lock in that small window,\nobserve the old busy state, and skip starting queued descriptors. Then\nthe abort handler overwrites the channel status as idle, leaving the new\ndescriptors stranded for good.\n\nKeep descriptor completion and the state transition in the same critical\nsection."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/dma/dw-edma/dw-edma-core.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf",
"lessThan": "4a72f81b8681b2ad7705cf039974c443dcc8ff00",
"versionType": "git",
"status": "affected"
},
{
"version": "e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf",
"lessThan": "b7b8b08cd6422f7ed783226ac4aa6cebe398ab54",
"versionType": "git",
"status": "affected"
},
{
"version": "e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf",
"lessThan": "0b028e5175590fb34ccbd537ff5b9cd386ce5747",
"versionType": "git",
"status": "affected"
},
{
"version": "e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf",
"lessThan": "075de95d7a7cd8fecfb6fe1c685c9064fc6c9d76",
"versionType": "git",
"status": "affected"
},
{
"version": "e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf",
"lessThan": "e20c6539394ac8d70240b85bb5963c74a3a49789",
"versionType": "git",
"status": "affected"
},
{
"version": "e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf",
"lessThan": "0c3294066c36d5980fd9c8192dcb53bb9ccd1f7b",
"versionType": "git",
"status": "affected"
},
{
"version": "e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf",
"lessThan": "f71c94c1a657492e015be227d44c4198a8e7a91d",
"versionType": "git",
"status": "affected"
},
{
"version": "e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf",
"lessThan": "dd80e259f65d932634e26d366570d71669ef6654",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/dma/dw-edma/dw-edma-core.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.3",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.3",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.270",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.221",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.188",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.157",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.110",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.52",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.6",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/075de95d7a7cd8fecfb6fe1c685c9064fc6c9d76",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/0b028e5175590fb34ccbd537ff5b9cd386ce5747",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/0c3294066c36d5980fd9c8192dcb53bb9ccd1f7b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/4a72f81b8681b2ad7705cf039974c443dcc8ff00",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/b7b8b08cd6422f7ed783226ac4aa6cebe398ab54",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/dd80e259f65d932634e26d366570d71669ef6654",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e20c6539394ac8d70240b85bb5963c74a3a49789",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f71c94c1a657492e015be227d44c4198a8e7a91d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}