AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-68466

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of DMA transfers in the mtd subsystem, specifically within the lpc32xx_slc driver. A failure to properly manage timeout conditions can lead to a situation where a timed-out DMA transfer is incorrectly reported as successful, potentially allowing unauthorized access to memory buffers. Organizations using affected Linux systems, particularly those relying on NAND flash memory operations, should prioritize patching to mitigate potential data integrity and security risks.

CVE
CVE-2026-68466
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout lpc32xx_xmit_dma() waits for the DMA completion callback but ignores wait_for_completion_timeout(). A timed out DMA transfer is therefore unmapped and reported as successful to the NAND read/write path. Return -ETIMEDOUT when the completion wait expires. Terminate the DMA channel before unmapping the scatterlist so the timed out transfer cannot continue to access the buffer after the error is returned.