CVE-2026-93169 PUBLISHED

dmaengine: zynqmp_dma: fix race between runtime PM and device removal

Assigner: Linux
Reserved: 17.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: zynqmp_dma: fix race between runtime PM and device removal

In zynqmp_dma_remove(), runtime PM was disabled only after checking state and doing a manual suspend. This can race with runtime PM in the remove/unbind (rmmod) path.

Disable runtime PM first, then suspend only if the device is not already suspended. To prevent any further runtime PM transitions.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 72dd8b2914b5db1dccf902971c2ea6b541711b28 to 32f69e6c95b59f9cfc649ebf352a204d23ba93d7 (excl.)
  • affected from 72dd8b2914b5db1dccf902971c2ea6b541711b28 to aec7cf9a5bd89047c58d5648bfce0b1bd19ba7d5 (excl.)
  • affected from 72dd8b2914b5db1dccf902971c2ea6b541711b28 to 516ba2d8b7aac4238f9fcbd58579c43c71b9b695 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.18 is affected
  • unaffected from 0 to 6.18 (excl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References