AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72147

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the dw-edma-pcie driver, where improper handling of PCI device IDs can lead to a NULL pointer dereference if a device is bound dynamically without the necessary driver data. This flaw could result in system crashes or instability when the device is enabled. Organizations utilizing Linux systems with this driver should prioritize patching to mitigate potential disruptions in service.

CVE
CVE-2026-72147
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dw_edma_pcie_probe() treats the PCI device ID driver_data as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can match the driver without that data, which leads to a NULL pointer dereference. Reject such matches before enabling the device.