CVE-2026-93169 (GCVE-0-2026-93169)
Vulnerability from cvelistv5
Published
2026-09-17 16:12
Modified
2026-10-19 09:06
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: dmaengine: zynqmp_dma: fix race between runtime PM and device removal In zynqmp_dma_remove(), runtime PM was disabled only after checking state and doing a manual suspend. This can race with runtime PM in the remove/unbind (rmmod) path. Disable runtime PM first, then suspend only if the device is not already suspended. To prevent any further runtime PM transitions.
References
Impacted products
Vendor Product Version
Linux Linux Version: 72dd8b2914b5db1dccf902971c2ea6b541711b28
Version: 72dd8b2914b5db1dccf902971c2ea6b541711b28
Version: 72dd8b2914b5db1dccf902971c2ea6b541711b28
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/dma/xilinx/zynqmp_dma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "32f69e6c95b59f9cfc649ebf352a204d23ba93d7",
              "status": "affected",
              "version": "72dd8b2914b5db1dccf902971c2ea6b541711b28",
              "versionType": "git"
            },
            {
              "lessThan": "aec7cf9a5bd89047c58d5648bfce0b1bd19ba7d5",
              "status": "affected",
              "version": "72dd8b2914b5db1dccf902971c2ea6b541711b28",
              "versionType": "git"
            },
            {
              "lessThan": "516ba2d8b7aac4238f9fcbd58579c43c71b9b695",
              "status": "affected",
              "version": "72dd8b2914b5db1dccf902971c2ea6b541711b28",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/dma/xilinx/zynqmp_dma.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.18"
            },
            {
              "lessThan": "6.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.52",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.6",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3",
                  "versionStartIncluding": "6.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: zynqmp_dma: fix race between runtime PM and device removal\n\nIn zynqmp_dma_remove(), runtime PM was disabled only after checking\nstate and doing a manual suspend. This can race with runtime PM in the\nremove/unbind (rmmod) path.\n\nDisable runtime PM first, then suspend only if the device is not already\nsuspended. To prevent any further runtime PM transitions."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T09:06:40.948Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/32f69e6c95b59f9cfc649ebf352a204d23ba93d7"
        },
        {
          "url": "https://git.kernel.org/stable/c/aec7cf9a5bd89047c58d5648bfce0b1bd19ba7d5"
        },
        {
          "url": "https://git.kernel.org/stable/c/516ba2d8b7aac4238f9fcbd58579c43c71b9b695"
        }
      ],
      "title": "dmaengine: zynqmp_dma: fix race between runtime PM and device removal",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-93169",
    "datePublished": "2026-09-17T16:12:00.570Z",
    "dateReserved": "2026-09-17T16:02:15.090Z",
    "dateUpdated": "2026-10-19T09:06:40.948Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.