Use-After-Free Vulnerability in Linux Kernel Affects DMA Channel Management

CVE-2026-98343

What is CVE-2026-98343?

A use-after-free vulnerability has been identified in the Linux kernel during the management of DMA channels. An issue occurs when the last reference to a DMA device is dropped, leading to potential access violations. Specifically, after the dma_device_put() function releases the device reference, the dma_chan_put() function attempts to access the freed memory, resulting in undefined behavior. This flaw can be exploited in process management and leads to risks such as arbitrary code execution or system instability. The vulnerability has been addressed by caching the module owner before the reference is released, preventing access to freed memory.

References