CVE-2026-46236
media: rc: xbox_remote: heed DMA restrictions
Description
In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO must not be part of the device structure because that violates the DMA coherency rules.
INFO
Published Date :
May 28, 2026, 10:16 a.m.
Last Modified :
June 10, 2026, 9:10 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update the Linux kernel to the patched version.
- Ensure IO buffers adhere to DMA coherency rules.
- Review device structure memory allocations.
- Apply vendor-provided security updates.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-46236.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-46236 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-46236
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-46236 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-46236 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jun. 10, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.175 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.209 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.140 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.32 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.90 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.9 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.0 up to (excluding) 5.10.258 Added Reference Type kernel.org: https://git.kernel.org/stable/c/0bd8ac88ec5f74cd0f4b8cfc54f4cc0827007249 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/0cc9251833bf02c8c7863404157c94dab5928fcf Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/0ea67a135335e51be50e83ee4cc99560b8b89c25 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/465d27ab83692167f06a6f917bdfd0a0d4fc8ff3 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/48a668c22e8f92637bc496e84d1cf06900f74a5c Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/63a960b39de9c51f29ca19aa5067934f865c0bc7 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/e0301883ec779c21158a3923b2eb666074fa976e Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff Types: Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 01, 2026
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/0ea67a135335e51be50e83ee4cc99560b8b89c25 Added Reference https://git.kernel.org/stable/c/465d27ab83692167f06a6f917bdfd0a0d4fc8ff3 Added Reference https://git.kernel.org/stable/c/e0301883ec779c21158a3923b2eb666074fa976e -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 28, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO must not be part of the device structure because that violates the DMA coherency rules. Added Reference https://git.kernel.org/stable/c/0bd8ac88ec5f74cd0f4b8cfc54f4cc0827007249 Added Reference https://git.kernel.org/stable/c/0cc9251833bf02c8c7863404157c94dab5928fcf Added Reference https://git.kernel.org/stable/c/48a668c22e8f92637bc496e84d1cf06900f74a5c Added Reference https://git.kernel.org/stable/c/63a960b39de9c51f29ca19aa5067934f865c0bc7 Added Reference https://git.kernel.org/stable/c/e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff