{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72149", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.908Z", "datePublished": "2026-08-15T05:53:20.695Z", "dateUpdated": "2026-08-15T05:53:20.695Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:53:20.695Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: tegra: Fix burst size calculation\n\nCurrently, the Tegra GPC DMA hardware requires the transfer length to\nbe a multiple of the max burst size configured for the channel. When a\nclient requests a transfer where the length is not evenly divisible by\nthe configured max burst size, the DMA hangs with partial burst at\nthe end.\n\nFix this by reducing the burst size to the largest power-of-2 value\nthat evenly divides the transfer length. For example, a 40-byte\ntransfer with a 16-byte max burst will now use an 8-byte burst\n(40 / 8 = 5 complete bursts) instead of causing a hang.\n\nThis issue was observed with the PL011 UART driver where TX DMA\ntransfers of arbitrary lengths were stuck."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/dma/tegra186-gpc-dma.c"], "versions": [{"version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "lessThan": "735951baa311c66353405dcac39375dd66441db0", "status": "affected", "versionType": "git"}, {"version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "lessThan": "8f0f5de1091119679d87f60dfb1acbff4b2a0ed3", "status": "affected", "versionType": "git"}, {"version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "lessThan": "a3b76b54e06d73166af4d1a284a0e0711889060c", "status": "affected", "versionType": "git"}, {"version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "lessThan": "7926c1e4be86379945fb5f168888ac4d2aaf6c91", "status": "affected", "versionType": "git"}, {"version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "lessThan": "6e37e9e230c7e848bd8e8cd4db15bb18bcf11ad1", "status": "affected", "versionType": "git"}, {"version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "lessThan": "4651df83b6c796daead3447e8fd874322918ee4f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/dma/tegra186-gpc-dma.c"], "versions": [{"version": "5.19", "status": "affected"}, {"version": "0", "lessThan": "5.19", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.178", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.1.178"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.19", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/735951baa311c66353405dcac39375dd66441db0"}, {"url": "https://git.kernel.org/stable/c/8f0f5de1091119679d87f60dfb1acbff4b2a0ed3"}, {"url": "https://git.kernel.org/stable/c/a3b76b54e06d73166af4d1a284a0e0711889060c"}, {"url": "https://git.kernel.org/stable/c/7926c1e4be86379945fb5f168888ac4d2aaf6c91"}, {"url": "https://git.kernel.org/stable/c/6e37e9e230c7e848bd8e8cd4db15bb18bcf11ad1"}, {"url": "https://git.kernel.org/stable/c/4651df83b6c796daead3447e8fd874322918ee4f"}], "title": "dmaengine: tegra: Fix burst size calculation", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/dma/tegra186-gpc-dma.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "735951baa311c66353405dcac39375dd66441db0", "status": "affected", "version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "versionType": "git"}, {"lessThan": "8f0f5de1091119679d87f60dfb1acbff4b2a0ed3", "status": "affected", "version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "versionType": "git"}, {"lessThan": "a3b76b54e06d73166af4d1a284a0e0711889060c", "status": "affected", "version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "versionType": "git"}, {"lessThan": "7926c1e4be86379945fb5f168888ac4d2aaf6c91", "status": "affected", "version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "versionType": "git"}, {"lessThan": "6e37e9e230c7e848bd8e8cd4db15bb18bcf11ad1", "status": "affected", "version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "versionType": "git"}, {"lessThan": "4651df83b6c796daead3447e8fd874322918ee4f", "status": "affected", "version": "ee17028009d49fffed8cc963455d33b1fd3f1d08", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/dma/tegra186-gpc-dma.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.19"}, {"lessThan": "5.19", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.178", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: tegra: Fix burst size calculation\n\nCurrently, the Tegra GPC DMA hardware requires the transfer length to\nbe a multiple of the max burst size configured for the channel. When a\nclient requests a transfer where the length is not evenly divisible by\nthe configured max burst size, the DMA hangs with partial burst at\nthe end.\n\nFix this by reducing the burst size to the largest power-of-2 value\nthat evenly divides the transfer length. For example, a 40-byte\ntransfer with a 16-byte max burst will now use an 8-byte burst\n(40 / 8 = 5 complete bursts) instead of causing a hang.\n\nThis issue was observed with the PL011 UART driver where TX DMA\ntransfers of arbitrary lengths were stuck."}], "id": "CVE-2026-72149", "lastModified": "2026-08-15T06:21:32.610", "metrics": {}, "published": "2026-08-15T06:21:32.610", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4651df83b6c796daead3447e8fd874322918ee4f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6e37e9e230c7e848bd8e8cd4db15bb18bcf11ad1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/735951baa311c66353405dcac39375dd66441db0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7926c1e4be86379945fb5f168888ac4d2aaf6c91"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8f0f5de1091119679d87f60dfb1acbff4b2a0ed3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a3b76b54e06d73166af4d1a284a0e0711889060c"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ee17028009d49fffed8cc963455d33b1fd3f1d08,735951baa311c66353405dcac39375dd66441db0)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ee17028009d49fffed8cc963455d33b1fd3f1d08,8f0f5de1091119679d87f60dfb1acbff4b2a0ed3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ee17028009d49fffed8cc963455d33b1fd3f1d08,a3b76b54e06d73166af4d1a284a0e0711889060c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ee17028009d49fffed8cc963455d33b1fd3f1d08,7926c1e4be86379945fb5f168888ac4d2aaf6c91)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ee17028009d49fffed8cc963455d33b1fd3f1d08,6e37e9e230c7e848bd8e8cd4db15bb18bcf11ad1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ee17028009d49fffed8cc963455d33b1fd3f1d08,4651df83b6c796daead3447e8fd874322918ee4f)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.1.178,6.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.145,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.97,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.40,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1.5,7.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T14:15:03.363639+00:00", "updated": "2026-08-15T21:15:03.161168+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-665"]}