CVE-2026-64168 Details
Description
In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe errors to avoid dereferencing an error pointer (or attempting to release a channel a second time). This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.
A vulnerability has been addressed in the Linux kernel's SPI SPRD driver, related to improper handling of pointer dereferencing after a failed Direct Memory Access (DMA) setup. During the probe process, if the DMA configuration fails, the driver reverts to Programmed Input/Output (PIO) mode. However, the driver did not initially verify whether DMA was enabled before attempting to release the DMA channels, particularly in cases of late probe errors. This oversight could lead to dereferencing an error pointer or unnecessarily releasing a DMA channel multiple times. The issue was identified by a developer named Sashiko while reviewing a patch related to resource allocation.
The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version of the stable Linux kernel where this issue has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0cdea166c1a07c200caf9d0b722224fca43b23ae | kernel.org | Patch |
| https://git.kernel.org/stable/c/3d67fffb74267772d461c02c67f1eff893ad547d | kernel.org | Patch |
| https://git.kernel.org/stable/c/450c319dd04d0eeff4184889768f7ada826a2e35 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a8f233fb0c7be29b97cd249f64120bf35ce72805 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b6f1acf4e57ccf708cdc0cb70f5bb5b65162963b | kernel.org | Patch |
| https://git.kernel.org/stable/c/be409d2bbe9ca7da7b05cc7dde7499bc481f0766 | kernel.org | Patch |
| https://git.kernel.org/stable/c/be74e276111f3c23b8e040c8c5e308f67a573add | kernel.org | Patch |
| https://git.kernel.org/stable/c/c33b4496e95d04722055446c0a31213639438536 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.1, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.142 >= 6.7, < 6.12.92 >= 6.13, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 13, 2026 | Initial Analysis | [email protected] |
| Jul 19, 2026 | New CVE Received | kernel.org |