CVE-2026-93042

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the dw-edma component of the DMA Engine where the system fails to properly terminate all descriptors without callbacks. When a deferred STOP reaches the interrupt handler, the system calls vchan cookie complete(), which schedules a callback for the active descriptor and leaves other issued or submitted descriptors queued. This behavior can lead to a use-after-free scenario where a late callback dereferences client state that has already been freed. Additionally, leftover descriptors may leak or restart into reused buffers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.