SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64170

MEDIUM · CVSS 5.5 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's SPI QUP driver, which improperly handles DMA setup failures, potentially leading to dereferencing an error pointer. This could result in system instability or crashes during subsequent probe errors or driver unbinding. Linux system administrators and developers working with the kernel should prioritize addressing this issue to ensure system reliability and prevent potential exploitation.

CVE
CVE-2026-64170
Severity
MEDIUM
CVSS
5.5
EPSS
0.11%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error pointer (or attempting to release a channel a second time) on later probe errors or driver unbind. This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

Related CVEs

Other vulnerabilities affecting the same vendor(s)