# CVE-2026-93042

Linux dw-edma DMA termination bug can cause use-after-free and kernel RCE.

- Page: https://www.vulneraibility.com/cve/CVE-2026-93042
- CVSS: 8.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.40% (percentile 34.6)
- Published: 2026-09-17

## Affected versions

- Linux: affected >= e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf and < 65e387b95d3855aa894ac729e1778e5bcb9083cb; >= e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf and < 4793f9099a1cadf4e37f3a03d524af6bce88a0ea; >= e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf and < be87d86537de7ea6fd025f41033d2faff880973f; >= e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf and < f3ec6702a1d216be61f692cc0a983d6c8fb5ebf7; >= e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf and < 99109a51efd28c9a661fbfb9469b023c517b31d1; 5.3; fixed in < 5.3, >= 6.6.157 and <= 6.6.*, >= 6.12.110 and <= 6.12.*, >= 6.18.52 and <= 6.18.*, >= 7.2.6 and <= 7.2.*, >= 7.3-rc1 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Use-after-free during DMA termination enables kernel memory corruption, local privilege escalation or arbitrary kernel code execution via malicious DMA or crafted workloads.

## Action

Immediate action required

## Recommendation

Apply the upstream/stable kernel patch or vendor update and reboot affected systems.

## References

- [other] https://git.kernel.org/stable/c/da56839aced48ecb70033962d7ea98f55b0c5656
- [other] https://git.kernel.org/stable/c/65e387b95d3855aa894ac729e1778e5bcb9083cb
- [other] https://git.kernel.org/stable/c/4793f9099a1cadf4e37f3a03d524af6bce88a0ea
- [other] https://git.kernel.org/stable/c/be87d86537de7ea6fd025f41033d2faff880973f
- [other] https://git.kernel.org/stable/c/f3ec6702a1d216be61f692cc0a983d6c8fb5ebf7
- [other] https://git.kernel.org/stable/c/99109a51efd28c9a661fbfb9469b023c517b31d1

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.