Linux Kernel Missing DMA Unmap Vulnerability in CX88 Audio Driver

Vulnerability

A vulnerability exists in the Linux kernel's CX88 audio driver, specifically in the handling of Direct Memory Access (DMA) resources. The issue arises because the driver fails to properly release DMA resources in certain error conditions, which can lead to resource leaks or undefined behavior. This vulnerability affects the stable versions of the Linux kernel.

Impact

The vulnerability can cause resource leaks by not properly releasing DMA resources, potentially leading to degraded system performance or instability.

Reproduction

The vulnerability can be reproduced by triggering an error condition in the CX88 audio driver's DMA handling. This can be done by initiating a DMA operation and then forcing an error before the operation completes, which will cause the driver to fail to release the allocated resources properly.

Remediation

Users can upgrade to the latest version of the Linux kernel, where this vulnerability has been addressed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.

Added: May 6, 2026, 12:52 PM
Updated: May 6, 2026, 12:52 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
7.6
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.