CVE-2026-64170 Details
Description
In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error pointer (or attempting to release a channel a second time) on later probe errors or driver unbind. This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.
A vulnerability in the Linux kernel's SPI QUP driver can lead to a null pointer dereference after a failed DMA setup. When the DMA initialization fails, the driver correctly reverts to PIO mode but neglects to clear the DMA channel pointers. This oversight can cause the driver to later dereference an error pointer or attempt to release a DMA channel multiple times, potentially leading to a use-after-free condition. The issue was identified during a review of a devres allocation conversion patch.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0bb3bd442f0bdad3932739a61dd6c580c9c1955e | kernel.org | Patch |
| https://git.kernel.org/stable/c/45760b72e84c1a1498f1a8a9047184c85299da20 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4bb4764f2c51f03f657a28029eb0595d8223aab5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4f4051e9d644c371c50de4a042b85bba6727d5c3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8f9b61d255b1e989b8913b06c8ebe0aba5e1b238 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9e673affb92c29d9ba879bf4ea81c5e840166b56 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a7e8f3efd50a165ba0189f6dc57f7e51a7d149db | kernel.org | Patch |
| https://git.kernel.org/stable/c/d577c55d189e7ae150973058d13e299b6855633f | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.1, < 5.10.259 >= 5.11, < 5.15.210 >= 5.16, < 6.1.176 >= 6.2, < 6.6.142 >= 6.7, < 6.12.92 >= 6.13, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 13, 2026 | Initial Analysis | [email protected] |
| Jul 19, 2026 | New CVE Received | kernel.org |