CVE-2026-72149

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-72149

Key Details

CVE	CVE-2026-72149
CVSS Score / Version	7.5 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: tegra: Fix burst size calculation

Currently, the Tegra GPC DMA hardware requires the transfer length to

be a multiple of the max burst size configured for the channel. When a

client requests a transfer where the length is not evenly divisible by

the configured max burst size, the DMA hangs with partial burst at

the end.

Fix this by reducing the burst size to the largest power-of-2 value

that evenly divides the transfer length. For example, a 40-byte

transfer with a 16-byte max burst will now use an 8-byte burst

(40 / 8 = 5 complete bursts) instead of causing a hang.

This issue was observed with the PL011 UART driver where TX DMA

transfers of arbitrary lengths were stuck. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-72149
CVE	https://www.cve.org/CVERecord?id=CVE-2026-72149

Source

Reference

NVD

CVE