01 Record

CVE-2026-98344

dmaengine: Fix device kref underflow in dma_chan_put()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

dmaengine: Fix device kref underflow in dma_chan_put()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 7.1% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-10-06 08:46Z23 DAYS AGO

Last updated

2026-10-19 09:17Z10 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-911Improper Update of Reference CountBase

Data version

5.2

Document digest

9fe3d85f19aaaa8b0dfbcf47b8c4ed0f6488f5b3a7d8a7099342f290d86880b5

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux8ad342a863590b24ce77681b7e081363fb3333f7 to < 036b527f92570206da4b8c40b38f8d689e29d0f3, 8ad342a863590b24ce77681b7e081363fb3333f7 to < 5fb1797a8c9485e40e5492fa0338ab5c7d1f3fef, 8ad342a863590b24ce77681b7e081363fb3333f7 to < 57f7f1c6827be7d8f80feca48d2125fb91c6f6ed, 8ad342a863590b24ce77681b7e081363fb3333f7 to < 7c3f4ce651d43705f9ec7f778f642a90d5ff4fba, 8ad342a863590b24ce77681b7e081363fb3333f7 to < de2677e57d3161390d8a508f08cddec6ef7e4b23, 8ad342a863590b24ce77681b7e081363fb3333f7 to < 1a0d9b406febf23054ad595fd47b29325e70fb2d, 8ad342a863590b24ce77681b7e081363fb3333f7 to < 77906ac448d2fa81fa710ae26c0e591ebdc81154, 8ad342a863590b24ce77681b7e081363fb3333f7 to < 44dab659064eb5c10adb0306510eebe848ed592d, 5.6—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/036b527f92570206da4b8c40b38f8d689e29d0f3
git.kernel.orghttps://git.kernel.org/stable/c/5fb1797a8c9485e40e5492fa0338ab5c7d1f3fef
git.kernel.orghttps://git.kernel.org/stable/c/57f7f1c6827be7d8f80feca48d2125fb91c6f6ed
git.kernel.orghttps://git.kernel.org/stable/c/7c3f4ce651d43705f9ec7f778f642a90d5ff4fba
git.kernel.orghttps://git.kernel.org/stable/c/de2677e57d3161390d8a508f08cddec6ef7e4b23
git.kernel.orghttps://git.kernel.org/stable/c/1a0d9b406febf23054ad595fd47b29325e70fb2d
git.kernel.orghttps://git.kernel.org/stable/c/77906ac448d2fa81fa710ae26c0e591ebdc81154
git.kernel.orghttps://git.kernel.org/stable/c/44dab659064eb5c10adb0306510eebe848ed592d

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.113-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.113-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.