{"id":"CVE-2026-72147","title":"dmaengine: dw-edma-pcie: Reject devices without driver data","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: dw-edma-pcie: Reject devices without driver data\n\ndw_edma_pcie_probe() treats the PCI device ID driver_data as the\ntemplate for the controller layout and cop…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 69bf416b31e2dc44aa8a10e7a215ad388994c7c6","Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 2733b5dcb5a4ba4446f7bac954b97e4501dcaa64","Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < a1042599fa8f9e313be176eb1ea1ae199f983419","Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 043acb00e4edd4b9ffb9dd0e357482dcd9086486","Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 044f7b3252d4fb2143d4999eec2800c08f1001ed","Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 11d7cfe0c119691b2dafbb699bbca90258c678aa","Linux 5.3"],"published":"2026-08-15","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:28:51.216Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72147","references":[{"url":"https://git.kernel.org/stable/c/69bf416b31e2dc44aa8a10e7a215ad388994c7c6"},{"url":"https://git.kernel.org/stable/c/2733b5dcb5a4ba4446f7bac954b97e4501dcaa64"},{"url":"https://git.kernel.org/stable/c/a1042599fa8f9e313be176eb1ea1ae199f983419"},{"url":"https://git.kernel.org/stable/c/043acb00e4edd4b9ffb9dd0e357482dcd9086486"},{"url":"https://git.kernel.org/stable/c/044f7b3252d4fb2143d4999eec2800c08f1001ed"},{"url":"https://git.kernel.org/stable/c/11d7cfe0c119691b2dafbb699bbca90258c678aa"}],"tags":["cve.org"],"epss":0.00211,"epssPercentile":0.11437,"ingestedAt":"2026-11-05T15:02:32.481Z","slug":"CVE-2026-72147","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: dw-edma-pcie: Reject devices without driver data\n\ndw_edma_pcie_probe() treats the PCI device ID driver_data as the\ntemplate for the controller layout and copies it unconditionally. A\ndevice bound dynamically via sysfs can match the driver without that\ndata, which leads to a NULL pointer dereference.\n\nReject such matches before enabling the device.\n\n## Affected\n\n- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 69bf416b31e2dc44aa8a10e7a215ad388994c7c6`\n- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 2733b5dcb5a4ba4446f7bac954b97e4501dcaa64`\n- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < a1042599fa8f9e313be176eb1ea1ae199f983419`\n- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 043acb00e4edd4b9ffb9dd0e357482dcd9086486`\n- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 044f7b3252d4fb2143d4999eec2800c08f1001ed`\n- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 11d7cfe0c119691b2dafbb699bbca90258c678aa`\n- `Linux 5.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}