7.8

CVE-2026-89994

dmaengine: fsl-edma: tracing: no ptr dereference during log output

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: fsl-edma: tracing: no ptr dereference during log output

The fsl edma events store a pointer to a struct fsl_edma_engine in the
ringbuffer and dereference it when a log entry is printed. At this time,
the pointer may no longer be valid.

Event injection can be used to trigger a crash:

$ cd /sys/kernel/tracing
$ echo 'value = 0' > events/fsl_edma/edma_writeb/inject
$ cat trace

The log output needs only edma->membase. Add a membase field at the end
of the event and use the new field for log output. Keep the existing
fields for backward compatibility.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 11102d0c343ba06ddd303f2503c0ce46d70052f2
Version < ef02cd3807f39ae1dbc924788d8fa6a85334c435
Status affected
Version 11102d0c343ba06ddd303f2503c0ce46d70052f2
Version < d382aaf5fed38c6dd2e0cc710d97cb81d660ffa7
Status affected
Version 11102d0c343ba06ddd303f2503c0ce46d70052f2
Version < 2a3801ae5c344473e648006c5b03a9216ac54a6a
Status affected
Version 11102d0c343ba06ddd303f2503c0ce46d70052f2
Version < 2ea04dca8e627f722caa7a2037cfbae0257f3501
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.10
Status affected
Version 0
Version < 6.10
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.083
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ef02cd3807f39ae1dbc924788d8fa6a85334c435
https://git.kernel.org/stable/c/d382aaf5fed38c6dd2e0cc710d97cb81d660ffa7
https://git.kernel.org/stable/c/2a3801ae5c344473e648006c5b03a9216ac54a6a
https://git.kernel.org/stable/c/2ea04dca8e627f722caa7a2037cfbae0257f3501