Strix
63.5K

CVE-2026-93170

HIGHCVSS 7.8/10

Last modified

CVE-2026-93170 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers Fix a race condition in AXIDMA and MCDMA irq handlers where the channel could be incorrectly marked as idle and attempt spurious transfers when descriptors are still being processed. The issue occurs when: 1. Multiple descriptors are queued and active. 2.

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers Fix a race condition in AXIDMA and MCDMA irq handlers where the channel could be incorrectly marked as idle and attempt spurious transfers when descriptors are still being processed. The issue occurs when: 1. Multiple descriptors are queued and active. 2. An interrupt fires after completing some descriptors. 3. xilinx_dma_complete_descriptor() moves completed descriptors to done_list. 4. Channel is marked idle and start_transfer() is called even though active_list still contains unprocessed descriptors. 5. This leads to premature transfer attempts and potential descriptor corruption or missed completions. Only mark the channel as idle and start new transfers when the active list is actually empty, ensuring proper channel state management and avoiding spurious transfer attempts.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= c0bba3a99f0709c24c2c7ada7cb098966b1d791f, < 7f4b989d7d87381927b98d64492f8dcf979f57ab; >= c0bba3a99f0709c24c2c7ada7cb098966b1d791f, < 5459e02707b27a964ae72e028d3ff72a3b687c4a; >= c0bba3a99f0709c24c2c7ada7cb098966b1d791f, < 425630e9eea1f9f8912b8c6abf01e0dab1e27917; >= c0bba3a99f0709c24c2c7ada7cb098966b1d791f, < fdaf297ab275c6efecac5e87669c31bc89b74297; >= c0bba3a99f0709c24c2c7ada7cb098966b1d791f, < c27d16fd2358b2fc3e1ffaca03afd11dc28630ea; >= c0bba3a99f0709c24c2c7ada7cb098966b1d791f, < ec927657524be4438447944a58173c7baf7f2384; >= c0bba3a99f0709c24c2c7ada7cb098966b1d791f, < c3e943490ced0b9ad475844eda7661f6a9bcfb4a; >= c0bba3a99f0709c24c2c7ada7cb098966b1d791f, < 0b6d055edb55ecadadf54e930c2b4fab76fa9a5a
LinuxLinux4.7

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-93170?
In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers Fix a race condition in AXIDMA and MCDMA irq handlers where the channel could be incorrectly marked as idle and attempt spurious transfers when descriptors are still being processed. The issue occurs when: 1. Multiple descriptors are queued and active. 2. An interrupt fires after completing some descriptors. 3. xilinx_dma_complete_descriptor() moves completed descriptors to done_list. 4. Channel is marked idle and start_transfer() is called even though active_list still contains unprocessed descriptors. 5. This leads to premature transfer attempts and potential descriptor corruption or missed completions. Only mark the channel as idle and start new transfers when the active list is actually empty, ensuring proper channel state management and avoiding spurious transfer attempts.
How severe is CVE-2026-93170?
CVE-2026-93170 has a CVSS score of 7.8/10 (HIGH severity).
How do I fix CVE-2026-93170?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-93170?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST