# dmaengine: dw-edma: Terminate all descriptors without callbacks

CVE record · `CVE-2026-93042`

- **Identifiers:** `CVE-2026-93042`
- **State:** Confirmed
- **Severity:** CVSS 8.8 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 17 Sept 2026
- **Updated:** 30 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:10 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before da56839aced48ecb70033962d7ea98f55b0c5656` (git)
  - affected: `e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before 65e387b95d3855aa894ac729e1778e5bcb9083cb` (git)
  - affected: `e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before 4793f9099a1cadf4e37f3a03d524af6bce88a0ea` (git)
  - affected: `e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before be87d86537de7ea6fd025f41033d2faff880973f` (git)
  - affected: `e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before f3ec6702a1d216be61f692cc0a983d6c8fb5ebf7` (git)
  - affected: `e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before 99109a51efd28c9a661fbfb9469b023c517b31d1` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.3`
  - unaffected: `before 5.3` (semver)
  - unaffected: `6.1.191 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.110 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.52 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.6 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 8.8 High, CVSS 3.1: `CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0040, the 35th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-93042](https://www.cve.org/CVERecord?id=CVE-2026-93042)
- [NVD: CVE-2026-93042](https://nvd.nist.gov/vuln/detail/CVE-2026-93042)

### References from the CNA

- <https://git.kernel.org/stable/c/da56839aced48ecb70033962d7ea98f55b0c5656>
- <https://git.kernel.org/stable/c/65e387b95d3855aa894ac729e1778e5bcb9083cb>
- <https://git.kernel.org/stable/c/4793f9099a1cadf4e37f3a03d524af6bce88a0ea>
- <https://git.kernel.org/stable/c/be87d86537de7ea6fd025f41033d2faff880973f>
- <https://git.kernel.org/stable/c/f3ec6702a1d216be61f692cc0a983d6c8fb5ebf7>
- <https://git.kernel.org/stable/c/99109a51efd28c9a661fbfb9469b023c517b31d1>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-93042>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-93042/>. Everything for agents: <https://agentprime.io/llms.txt>.