CVE record · CVE-2026-93042

dmaengine: dw-edma: Terminate all descriptors without callbacks

CVSS 8.8 HighEPSS 0.0040 · 35th percentile

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:10 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before da56839aced48ecb70033962d7ea98f55b0c5656 git
  • affected e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before 65e387b95d3855aa894ac729e1778e5bcb9083cb git
  • affected e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before 4793f9099a1cadf4e37f3a03d524af6bce88a0ea git
  • affected e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before be87d86537de7ea6fd025f41033d2faff880973f git
  • affected e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before f3ec6702a1d216be61f692cc0a983d6c8fb5ebf7 git
  • affected e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf to before 99109a51efd28c9a661fbfb9469b023c517b31d1 git
Other versions: unaffected
Linux Linux
  • affected 5.3
  • unaffected before 5.3 semver
  • unaffected 6.1.191 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.52 to 6.18.*, inclusive semver
  • unaffected 7.2.6 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-93042
CNA
Linux
Published
17 Sept 2026
Updated
30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
8.8 High 3.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0040, the 35th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.