CVE-2026-46255

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46255", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.107Z", "datePublished": "2026-06-03T15:49:52.091Z", "dateUpdated": "2026-06-03T15:49:52.091Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-03T15:49:52.091Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: fsl-edma: don't explicitly disable clocks in .remove()\n\nThe clocks in fsl_edma_engine::muxclk are allocated and enabled with\ndevm_clk_get_enabled(), which automatically cleans these resources up,\nbut these clocks are also manually disabled in fsl_edma_remove(). This\ncauses warnings on driver removal for each clock:\n\n edma_module already disabled\n WARNING: CPU: 0 PID: 418 at drivers/clk/clk.c:1200 clk_core_disable+0x198/0x1c8\n [...]\n Call trace:\n clk_core_disable+0x198/0x1c8 (P)\n clk_disable+0x34/0x58\n fsl_edma_remove+0x74/0xe8 [fsl_edma]\n [...]\n ---[ end trace 0000000000000000 ]---\n edma_module already unprepared\n WARNING: CPU: 0 PID: 418 at drivers/clk/clk.c:1059 clk_core_unprepare+0x1f8/0x220\n [...]\n Call trace:\n clk_core_unprepare+0x1f8/0x220 (P)\n clk_unprepare+0x34/0x58\n fsl_edma_remove+0x7c/0xe8 [fsl_edma]\n [...]\n ---[ end trace 0000000000000000 ]---\n\nFix these warnings by removing the unnecessary fsl_disable_clocks() call\nin fsl_edma_remove()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/dma/fsl-edma-main.c"], "versions": [{"version": "a9903de3aa16731846bf924342eca44bdabe9be6", "lessThan": "533d495f15e4c88ad5246c7f90ae026702e28d75", "status": "affected", "versionType": "git"}, {"version": "a9903de3aa16731846bf924342eca44bdabe9be6", "lessThan": "68feac21bd4de7ae4faba05704c404861d991fcf", "status": "affected", "versionType": "git"}, {"version": "a9903de3aa16731846bf924342eca44bdabe9be6", "lessThan": "bda244871179543dd3be7d093236cb33b2fb1765", "status": "affected", "versionType": "git"}, {"version": "a9903de3aa16731846bf924342eca44bdabe9be6", "lessThan": "b84dba68c4823da452cec99a5d213571a65d06de", "status": "affected", "versionType": "git"}, {"version": "a9903de3aa16731846bf924342eca44bdabe9be6", "lessThan": "666c53e94c1d0bf0bdf14c49505ece9ddbe725bc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/dma/fsl-edma-main.c"], "versions": [{"version": "6.6", "status": "affected"}, {"version": "0", "lessThan": "6.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.128", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.14", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.4", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.6.128"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.18.14"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "6.19.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/533d495f15e4c88ad5246c7f90ae026702e28d75"}, {"url": "https://git.kernel.org/stable/c/68feac21bd4de7ae4faba05704c404861d991fcf"}, {"url": "https://git.kernel.org/stable/c/bda244871179543dd3be7d093236cb33b2fb1765"}, {"url": "https://git.kernel.org/stable/c/b84dba68c4823da452cec99a5d213571a65d06de"}, {"url": "https://git.kernel.org/stable/c/666c53e94c1d0bf0bdf14c49505ece9ddbe725bc"}], "title": "dmaengine: fsl-edma: don't explicitly disable clocks in .remove()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/dma/fsl-edma-main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "533d495f15e4c88ad5246c7f90ae026702e28d75", "status": "affected", "version": "a9903de3aa16731846bf924342eca44bdabe9be6", "versionType": "git"}, {"lessThan": "68feac21bd4de7ae4faba05704c404861d991fcf", "status": "affected", "version": "a9903de3aa16731846bf924342eca44bdabe9be6", "versionType": "git"}, {"lessThan": "bda244871179543dd3be7d093236cb33b2fb1765", "status": "affected", "version": "a9903de3aa16731846bf924342eca44bdabe9be6", "versionType": "git"}, {"lessThan": "b84dba68c4823da452cec99a5d213571a65d06de", "status": "affected", "version": "a9903de3aa16731846bf924342eca44bdabe9be6", "versionType": "git"}, {"lessThan": "666c53e94c1d0bf0bdf14c49505ece9ddbe725bc", "status": "affected", "version": "a9903de3aa16731846bf924342eca44bdabe9be6", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/dma/fsl-edma-main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.6"}, {"lessThan": "6.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.128", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.75", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.14", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C0FD95A9-209E-44A8-8F1D-1EB130F75861", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF463CB7-1F58-4607-B847-77ED23E4B9B7", "versionEndExcluding": "6.18.14", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "672A3E79-EC03-479D-8503-361DFBDC8092", "versionEndExcluding": "6.19.4", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: fsl-edma: don't explicitly disable clocks in .remove()\n\nThe clocks in fsl_edma_engine::muxclk are allocated and enabled with\ndevm_clk_get_enabled(), which automatically cleans these resources up,\nbut these clocks are also manually disabled in fsl_edma_remove(). This\ncauses warnings on driver removal for each clock:\n\n edma_module already disabled\n WARNING: CPU: 0 PID: 418 at drivers/clk/clk.c:1200 clk_core_disable+0x198/0x1c8\n [...]\n Call trace:\n clk_core_disable+0x198/0x1c8 (P)\n clk_disable+0x34/0x58\n fsl_edma_remove+0x74/0xe8 [fsl_edma]\n [...]\n ---[ end trace 0000000000000000 ]---\n edma_module already unprepared\n WARNING: CPU: 0 PID: 418 at drivers/clk/clk.c:1059 clk_core_unprepare+0x1f8/0x220\n [...]\n Call trace:\n clk_core_unprepare+0x1f8/0x220 (P)\n clk_unprepare+0x34/0x58\n fsl_edma_remove+0x7c/0xe8 [fsl_edma]\n [...]\n ---[ end trace 0000000000000000 ]---\n\nFix these warnings by removing the unnecessary fsl_disable_clocks() call\nin fsl_edma_remove()."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndmaengine: fsl-edma: no deshabilitar expl\u00edcitamente los relojes en .remove()\n\nLos relojes en fsl_edma_engine::muxclk se asignan y habilitan con\ndevm_clk_get_enabled(), lo que autom\u00e1ticamente libera estos recursos,\npero estos relojes tambi\u00e9n se deshabilitan manualmente en fsl_edma_remove(). Esto\ncausa advertencias al eliminar el controlador para cada reloj:\n\n edma_module ya deshabilitado\n ADVERTENCIA: CPU: 0 PID: 418 at drivers/clk/clk.c:1200 clk_core_disable+0x198/0x1c8\n [...]\n Traza de llamada:\n clk_core_disable+0x198/0x1c8 (P)\n clk_disable+0x34/0x58\n fsl_edma_remove+0x74/0xe8 [fsl_edma]\n [...]\n ---[ fin de la traza 0000000000000000 ]---\n edma_module ya no preparado\n ADVERTENCIA: CPU: 0 PID: 418 at drivers/clk/clk.c:1059 clk_core_unprepare+0x1f8/0x220\n [...]\n Traza de llamada:\n clk_core_unprepare+0x1f8/0x220 (P)\n clk_unprepare+0x34/0x58\n fsl_edma_remove+0x7c/0xe8 [fsl_edma]\n [...]\n ---[ fin de la traza 0000000000000000 ]---\n\nSolucionar estas advertencias eliminando la llamada innecesaria a fsl_disable_clocks()\nen fsl_edma_remove()."}], "id": "CVE-2026-46255", "lastModified": "2026-07-22T20:10:00.127", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-06-03T18:16:26.463", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/533d495f15e4c88ad5246c7f90ae026702e28d75"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/666c53e94c1d0bf0bdf14c49505ece9ddbe725bc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/68feac21bd4de7ae4faba05704c404861d991fcf"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b84dba68c4823da452cec99a5d213571a65d06de"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bda244871179543dd3be7d093236cb33b2fb1765"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: dmaengine: fsl-edma: don't explicitly disable clocks in .remove()", "id": "2484485", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484485"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-832", "details": ["A flaw was found in the Linux kernel's fsl-edma driver. This vulnerability occurs because the driver attempts to explicitly disable clocks during its removal process, even though these resources are automatically managed. This redundant action can lead to warnings being generated during driver removal, indicating that the clock module is already disabled or unprepared. While not directly exploitable for arbitrary code execution or privilege escalation, these warnings can indicate an unexpected state in the system."], "name": "CVE-2026-46255", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-06-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-46255\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46255\nhttps://lore.kernel.org/linux-cve-announce/2026060335-CVE-2026-46255-f3b9@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a9903de3aa16731846bf924342eca44bdabe9be6,533d495f15e4c88ad5246c7f90ae026702e28d75)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a9903de3aa16731846bf924342eca44bdabe9be6,68feac21bd4de7ae4faba05704c404861d991fcf)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a9903de3aa16731846bf924342eca44bdabe9be6,bda244871179543dd3be7d093236cb33b2fb1765)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a9903de3aa16731846bf924342eca44bdabe9be6,b84dba68c4823da452cec99a5d213571a65d06de)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[a9903de3aa16731846bf924342eca44bdabe9be6,666c53e94c1d0bf0bdf14c49505ece9ddbe725bc)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.128,7.0.0]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.75,6.13.0]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.14,6.19.0]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.19.4,7.0.0]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-06-03T19:15:26.151382+00:00", "updated": "2026-06-09T23:15:16.731472+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}