CVE-2026-80902 dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
A memory leak in the sun6i-dma driver allows attackers to cause denial of service by exhausting kernel memory through DMA termination.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80902?
CVE-2026-80902 is a memory corruption vulnerability in Linux, published on 4 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
When terminating DMA transfers, active descriptors are not properly reclaimed. Only cyclic descriptors were handled, leaving non-cyclic descriptors and their LLI chains to be permanently leaked.
Fix by using vchan_terminate_vdesc() which handles both cyclic and non-cyclic descriptors by adding them to desc_terminated queue for proper cleanup.
Add pchan->desc != pchan->done check to prevent double-adding completed descriptors, which would corrupt the list.
Which versions are affected by CVE-2026-80902?
How do I fix CVE-2026-80902?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-80902 being exploited?
There is no known exploitation of CVE-2026-80902 in the wild and no public exploit code.
Sources
Also known as AZL-99450, BELL-CVE-2026-80902, DEBIAN-CVE-2026-80902, GHSA-6c2q-rq6r-4jjx, UBUNTU-CVE-2026-80902.