CVE-2026-46236 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO must not be part of the device structure because that violates the DMA coherency rules.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/0bd8ac88ec5f74cd0f4b8cfc54f4cc0827007249
https://git.kernel.org/stable/c/0cc9251833bf02c8c7863404157c94dab5928fcf
https://git.kernel.org/stable/c/48a668c22e8f92637bc496e84d1cf06900f74a5c
https://git.kernel.org/stable/c/63a960b39de9c51f29ca19aa5067934f865c0bc7
https://git.kernel.org/stable/c/e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff

History

Thu, 28 May 2026 10:15:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions The buffer for IO must not be part of the device structure because that violates the DMA coherency rules.
Title		media: rc: xbox_remote: heed DMA restrictions
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0bd8ac88ec5f74cd0f4b8cfc54f4cc0827007249 https://git.kernel.org/stable/c/0cc9251833bf02c8c7863404157c94dab5928fcf https://git.kernel.org/stable/c/48a668c22e8f92637bc496e84d1cf06900f74a5c https://git.kernel.org/stable/c/63a960b39de9c51f29ca19aa5067934f865c0bc7 https://git.kernel.org/stable/c/e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-05-28T09:41:05.230Z

Updated: 2026-05-28T09:41:05.230Z

Reserved: 2026-05-13T15:03:33.106Z

Link: CVE-2026-46236

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-05-28T10:16:39.240

Modified: 2026-05-28T10:16:39.240

Link: CVE-2026-46236

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46236", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.106Z", "datePublished": "2026-05-28T09:41:05.230Z", "dateUpdated": "2026-05-28T09:41:05.230Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-28T09:41:05.230Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rc: xbox_remote: heed DMA restrictions\n\nThe buffer for IO must not be part of the device structure\nbecause that violates the DMA coherency rules."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/rc/xbox_remote.c"], "versions": [{"version": "02d32bdad3123d7376244256936a6b3b6ee434e8", "lessThan": "0cc9251833bf02c8c7863404157c94dab5928fcf", "status": "affected", "versionType": "git"}, {"version": "02d32bdad3123d7376244256936a6b3b6ee434e8", "lessThan": "48a668c22e8f92637bc496e84d1cf06900f74a5c", "status": "affected", "versionType": "git"}, {"version": "02d32bdad3123d7376244256936a6b3b6ee434e8", "lessThan": "63a960b39de9c51f29ca19aa5067934f865c0bc7", "status": "affected", "versionType": "git"}, {"version": "02d32bdad3123d7376244256936a6b3b6ee434e8", "lessThan": "0bd8ac88ec5f74cd0f4b8cfc54f4cc0827007249", "status": "affected", "versionType": "git"}, {"version": "02d32bdad3123d7376244256936a6b3b6ee434e8", "lessThan": "e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/media/rc/xbox_remote.c"], "versions": [{"version": "5.0", "status": "affected"}, {"version": "0", "lessThan": "5.0", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.140", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.90", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.32", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.9", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "6.6.140"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "6.12.90"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "6.18.32"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "7.0.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0", "versionEndExcluding": "7.1-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/0cc9251833bf02c8c7863404157c94dab5928fcf"}, {"url": "https://git.kernel.org/stable/c/48a668c22e8f92637bc496e84d1cf06900f74a5c"}, {"url": "https://git.kernel.org/stable/c/63a960b39de9c51f29ca19aa5067934f865c0bc7"}, {"url": "https://git.kernel.org/stable/c/0bd8ac88ec5f74cd0f4b8cfc54f4cc0827007249"}, {"url": "https://git.kernel.org/stable/c/e280d1e5e3f2595bbb43fe6e1bce00c59a43c0ff"}], "title": "media: rc: xbox_remote: heed DMA restrictions", "x_generator": {"engine": "bippy-1.2.0"}}}}