What’s Vulnerable › Vulnerabilities

CVE-2026-89993: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-16 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs dw_edma_irq_request() passes struct dw_edma_irq to request_irq() before dw_edma_channel_setup() fills the back pointer. A shared interrupt can therefore enter the handler with dw_irq->dw still NULL, leading to a NULL pointer dereference. Set the back pointer before installing each handler.

Affected products

• Linux kernel: 5.3 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/07e50cef557def076418c67051a336e4c6bd50e1
• https://git.kernel.org/stable/c/17ef63843c0fcbf1efdfbbfb0f5584a5ea2c91ba
• https://git.kernel.org/stable/c/647217abea849d3d45f8cb0b8ee5b78d50f26985
• https://git.kernel.org/stable/c/b86280b12ccf33b68b309b7cb0e4476894dfe77c
• https://git.kernel.org/stable/c/d232bc6cf4562132ef50644484dfd4b23a593295
• https://git.kernel.org/stable/c/d91fb6c0d10dad32929dc5c6850f89df34e1bfcd
• https://git.kernel.org/stable/c/fac202d73e7a649b7d4010325c6c6dcd9334fe65

Get alerted when CVE-2026-89993 or the next vulnerability affects your stack