Bug 2540450 (CVE-2026-97412) - CVE-2026-97412 kernel: pds_core: quiesce DMA before freeing resources
Summary: CVE-2026-97412 kernel: pds_core: quiesce DMA before freeing resources
Keywords:
Status: NEW
Alias: CVE-2026-97412
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-24 16:53 UTC by OSIDB Bzimport
Modified: 2026-09-29 10:13 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-24 16:53:03 UTC
In the Linux kernel, the following vulnerability has been resolved:

pds_core: quiesce DMA before freeing resources

pdsc_teardown() frees DMA buffers but does not disable bus mastering,
leaving the device able to perform DMA after the buffers are freed.
This can lead to use-after-free if the device writes to freed memory.

Add pci_clear_master() to pdsc_teardown() to disable bus mastering
before freeing resources, ensuring all DMA is quiesced.

Add pci_set_master() to pdsc_setup() to re-enable bus mastering,
which is needed for the firmware recovery path since pdsc_teardown()
now disables it.


Note You need to log in before you can comment on or make changes to this bug.