---
id: CVE-2026-72147
title: 'dmaengine: dw-edma-pcie: Reject devices without driver data'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dmaengine: dw-edma-pcie: Reject devices without driver data

  dw_edma_pcie_probe() treats the PCI device ID driver_data as the
  template for the controller layout and cop…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 <
    69bf416b31e2dc44aa8a10e7a215ad388994c7c6
  - >-
    Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 <
    2733b5dcb5a4ba4446f7bac954b97e4501dcaa64
  - >-
    Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 <
    a1042599fa8f9e313be176eb1ea1ae199f983419
  - >-
    Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 <
    043acb00e4edd4b9ffb9dd0e357482dcd9086486
  - >-
    Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 <
    044f7b3252d4fb2143d4999eec2800c08f1001ed
  - >-
    Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 <
    11d7cfe0c119691b2dafbb699bbca90258c678aa
  - Linux 5.3
published: '2026-08-15'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:28:51.216Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72147'
references:
  - url: 'https://git.kernel.org/stable/c/69bf416b31e2dc44aa8a10e7a215ad388994c7c6'
  - url: 'https://git.kernel.org/stable/c/2733b5dcb5a4ba4446f7bac954b97e4501dcaa64'
  - url: 'https://git.kernel.org/stable/c/a1042599fa8f9e313be176eb1ea1ae199f983419'
  - url: 'https://git.kernel.org/stable/c/043acb00e4edd4b9ffb9dd0e357482dcd9086486'
  - url: 'https://git.kernel.org/stable/c/044f7b3252d4fb2143d4999eec2800c08f1001ed'
  - url: 'https://git.kernel.org/stable/c/11d7cfe0c119691b2dafbb699bbca90258c678aa'
tags:
  - cve.org
epss: 0.00211
epssPercentile: 0.11437
ingestedAt: '2026-11-05T15:02:32.481Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma-pcie: Reject devices without driver data

dw_edma_pcie_probe() treats the PCI device ID driver_data as the
template for the controller layout and copies it unconditionally. A
device bound dynamically via sysfs can match the driver without that
data, which leads to a NULL pointer dereference.

Reject such matches before enabling the device.

## Affected

- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 69bf416b31e2dc44aa8a10e7a215ad388994c7c6`
- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 2733b5dcb5a4ba4446f7bac954b97e4501dcaa64`
- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < a1042599fa8f9e313be176eb1ea1ae199f983419`
- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 043acb00e4edd4b9ffb9dd0e357482dcd9086486`
- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 044f7b3252d4fb2143d4999eec2800c08f1001ed`
- `Linux >= 41aaff2a2ac01c5f5415f9de9cd7015ac2b8d569 < 11d7cfe0c119691b2dafbb699bbca90258c678aa`
- `Linux 5.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.