CVE-2026-97412

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the pds core component. The pdsc teardown() function frees DMA buffers without disabling bus mastering, which allows the device to continue performing Direct Memory Access (DMA) operations after the buffers have been released. If the device writes to this freed memory, it can lead to a use-after-free condition. DMA is a feature that allows hardware components to access main system memory independently of the central processing unit.

Recommendations Update the Linux kernel to a version where pci clear master() is added to pdsc teardown() to disable bus mastering before resources are freed, and pci set master() is added to pdsc setup() to re-enable it for the firmware recovery path.