CVE-2026-46236

media: rc: xbox_remote: heed DMA restrictions

MEDIUM
5.5
CVSS Score
Published: May 28, 2026 at 09:41 AM UTC
Updated: June 17, 2026 at 10:53 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO must not be part of the device structure because that violates the DMA coherency rules.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.0 ≤ v < 5.10.2585.0 ≤ v < 5.15.2095.0 ≤ v < 6.1.1755.0 ≤ v < 6.12.905.0 ≤ v < 6.18.325.0 ≤ v < 6.6.1405.0 ≤ v < 7.0.95.0 ≤ v < 7.15.11 ≤ v < 5.15.2095.16 ≤ v < 6.1.1756.13 ≤ v < 6.18.326.19 ≤ v < 7.0.96.2 ≤ v < 6.6.1406.7 ≤ v < 6.12.902d32bdad3123d7376244256936a6b3b6ee434e85.0
Vendor states this is fixed in 0bd8ac88ec5f74cd0f4b8cfc54f4cc0827007249 (fixed)
Vendor states this is fixed in 0cc9251833bf02c8c7863404157c94dab5928fcf (fixed)
Vendor states this is fixed in 0ea67a135335e51be50e83ee4cc99560b8b89c25 (fixed)
Vendor states this is fixed in 465d27ab83692167f06a6f917bdfd0a0d4fc8ff3 (fixed)
Vendor states this is fixed in 48a668c22e8f92637bc496e84d1cf06900f74a5c (fixed)
Vendor states this is fixed in 63a960b39de9c51f29ca19aa5067934f865c0bc7 (fixed)
Vendor states this is fixed in e0301883ec779c21158a3923b2eb666074fa976e (fixed)
Vendor states this is fixed in e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff (fixed)
Vendor states this is fixed in 5.0 (unaffected)
Vendor states this is fixed in 5.10.258 (unaffected)
Vendor states this is fixed in 5.15.209 (unaffected)
Vendor states this is fixed in 6.1.175 (unaffected)
Vendor states this is fixed in 6.12.90 (unaffected)
Vendor states this is fixed in 6.18.32 (unaffected)
Vendor states this is fixed in 6.6.140 (unaffected)
Vendor states this is fixed in 7.0.9 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card