Back to overview

CVE-2026-64221

Description
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to the released channel to the DMA engine (or trying to free the channel a second time on late probe errors or driver unbind). This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

Metadata

CVE ID
CVE-2026-64221
State
PUBLISHED
Assigner
Linux
Reserved
2026-07-19 15:36 UTC
Published
2026-07-24 15:23 UTC
Last updated
2026-07-24 15:23 UTC
Vendor / Product
Linux / Linux
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (2)
VendorProductPlatformVersions
Linux Linux c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83 < 9c6f306a8140962c7284197db54b96fdb5f468d6, c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83 < 3bbbe7ae3fdada0df4157c1ffe989f92dfa8dcd6, c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83 < d6f422b122922d1abee907d673bcc990e5f3672d, c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83 < f2dc841d7dc9063fe9b47ced869b1271e55052ae …
Linux Linux 4.12, 0 < 4.12, 5.10.258 ≤ 5.10.*, 5.15.209 ≤ 5.15.* …
Back to overview