AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72476

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

A use-after-free vulnerability exists in the Linux kernel's DMA engine, specifically within the `dma_release_channel()` function, which could lead to potential memory corruption. This issue arises when the reference count of the DMA device is not properly managed, allowing for unsafe access to freed memory. Linux system administrators and developers utilizing affected kernel versions should prioritize applying the fix to mitigate the risk of exploitation.

CVE
CVE-2026-72476
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_release_channel(), check chan->device->privatecnt after call dma_chan_put(). However, dma_chan_put() call dma_device_put() which could release the last reference of the device if the DMA provider is already gone and hence free it. Fixes it by moving dma_chan_put() after the check.