Executive brief
A vulnerability was identified in the Linux kernel's Xilinx XDMA driver, which manages high-speed data transfers between system memory and Xilinx hardware. Due to incorrect error handling during initialization, the system may fail to properly recognize configuration failures, potentially leading to system instability or a denial-of-service. This could allow a local user to cause a system crash or prevent the hardware from functioning correctly.
Technical details
A vulnerability exists in the xdma_probe function within drivers/dma/xilinx/xdma.c of the Linux kernel. The driver incorrectly checks the return value of devm_regmap_init_mmio() against NULL, whereas the function actually returns an ERR_PTR() on failure. This logic error prevents the driver from correctly identifying and handling initialization failures, leading to the use of invalid pointers or incorrect error reporting. An attacker with local access could potentially leverage this to cause a kernel oops or denial-of-service condition. The issue has been resolved by updating the check to use IS_ERR() and properly extracting the error code.
Affected products
- Linux Linux Kernel 6.3 to 6.6.131, 6.7 to 6.12.80, 6.13 to 6.18.21, 6.19 to 6.19.11, 7.0-rc1 to 7.0-rc6
Timeline
- 2025-10-14: other: Initial patch authored
- 2026-03-09: patched: Mainline patch committed
- 2026-04-22: disclosed: CVE published
- 2026-05-19: advisory: NVD enrichment and analysis completed
References
- https://git.kernel.org/stable/c/4b6e1da50b22e5528b9003f376a3cecccce4decc
- https://git.kernel.org/stable/c/59f6ccd0f3345be2e8a78bdef2103e93f180633a
- https://git.kernel.org/stable/c/9787b3d9b908785b40bc3f2e6d7082fdb8fdd98a
- https://git.kernel.org/stable/c/e0adbf74e2a0455a6bc9628726ba87bcd0b42bf8
- https://git.kernel.org/stable/c/f27197ccfd2ecd2c71f27fd57c6d507e892ad24d