Improper input validation in Linux kernel - CVE-2026-72149

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU143445

Improper input validation in Linux kernel - CVE-2026-72149

Published: August 16, 2026


Vulnerability identifier: #VU143445
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-72149
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper input validation in the Tegra GPC DMA driver burst size calculation when processing DMA transfer requests whose lengths are not evenly divisible by the configured maximum burst size. A local user can trigger a DMA transfer with a crafted length to cause a denial of service.

This issue can cause the DMA engine to hang with a partial burst at the end, and it was observed with PL011 UART TX DMA transfers of arbitrary lengths.


Affected software

Linux kernel
Ubuntu
linux-gcp-7.0 (Ubuntu package)
linux-azure-7.0 (Ubuntu package)

How to mitigate CVE-2026-72149

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux-gcp-7.0 (Ubuntu package) - addressed in versions 7.0.0-38.38~24.04.4, 7.0.0-1013.13~24.04.1, 7.0.0-1014.14~24.04.1
linux-azure-7.0 (Ubuntu package) - addressed in versions 7.0.0-1016.16~24.04.1, 7.0.0-1017.17~24.04.1

External References

Related Security Bulletins