SB20260816378 - Improper Initialization in Linux kernel dma sh driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Initialization (CVE-ID: CVE-2026-72146)

CWE-ID: CWE-665 - Improper Initialization

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local attacker to cause a denial of service.

The vulnerability exists due to improper initialization in the rz-dmac DMA driver interrupt handling path when registering interrupts before channel and driver state is fully initialized. A local attacker can trigger an interrupt during device initialization to cause a denial of service.

The interrupt handler may access an uninitialized channel base pointer and uninitialized descriptor lists.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/07ae600bd353b22f31a8f1007269744fafc7f123
• https://git.kernel.org/stable/c/2a4d9e2234c3f817bb0ddbc8680d09ce9be84f93
• https://git.kernel.org/stable/c/5b12de6229d662864ee22c11d4876652b40120f0
• https://git.kernel.org/stable/c/731712403ddb39d1a76a11abf339a0615bc85de7
• https://git.kernel.org/stable/c/ec9f66c91bffdb69d309bae6dfb387562db7ebc8