CVE-2026-93123

CVE CVE-2026-93123EUVD EUVD-2026-82231Published 2026-09-17T16:11:28.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: do not advance stale DMA completions The qcom GENI serial DMA TX completion path advances the transmit fifo by the number of bytes recorded in port->tx_remaining. If uart_flush_buffer() runs after the hardware has completed a DMA transfer but before the DMA completion interrupt has been handled, the serial core resets the transmit fifo while port->tx_remaining still describes the old DMA transfer. A previous fix avoided advancing an empty fifo by checking that the fifo length is at least tx_remaining. That still does not distinguish the old DMA payload from new bytes written after the flush. If userspace writes new data before the stale DMA completion interrupt is handled, the fifo can again contain at least tx_remaining bytes and the stale completion can advance and discard those new bytes. Mark an in-flight DMA transfer stale when the transmit fifo is flushed. The later completion still unprepares the original DMA mapping using the saved length, but it no longer advances the transmit fifo.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux 2aaa43c7077833301c237684cd7bc9ae5e3dec95 <c02d030747c46da33faf406dd772ef91100efa27; patch: 7.2.6; 6.3; 2aaa43c7077833301c237684cd7bc9ae5e3dec95 <59faa59c25a0a098fbc86275408d7c8405015702; patch: 7.3-rc1; patch: 6.12.110; 2aaa43c7077833301c237684cd7bc9ae5e3dec95 <231c84fe7ec40e4a06c398c0591d5b8e823d68e1; patch: 6.18.52; patch: 0; 2aaa43c7077833301c237684cd7bc9ae5e3dec95 <7ea38c49e7178960926657863299face6dc0e1b0

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.