CVE-2026-98416

Received Received - Intake

NULL Pointer Dereference in Linux Kernel DMA Engine

Publication date: 2026-10-14

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() If devm_kcalloc() for rx_chn->flows fails in a channel request function, the error path calls k3_udma_glue_release_rx_chn(), which dereferences the NULL rx_chn->flows pointer in k3_udma_glue_release_rx_flow(). Skip the flow release loop in k3_udma_glue_release_rx_chn() when rx_chn->flows is not allocated. Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98416

EUVD

EUVD-2026-101065

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	d702419134133db1eab2067dc6ea5723467fd917
Linux	Linux	d702419134133db1eab2067dc6ea5723467fd917
Linux	Linux	d702419134133db1eab2067dc6ea5723467fd917
Linux	Linux	d702419134133db1eab2067dc6ea5723467fd917
Linux	Linux	d702419134133db1eab2067dc6ea5723467fd917
Linux	Linux	d702419134133db1eab2067dc6ea5723467fd917
Linux	Linux	d702419134133db1eab2067dc6ea5723467fd917
Linux	Linux	d702419134133db1eab2067dc6ea5723467fd917
Linux	Linux	5.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's TI K3 UDMA glue driver. It occurs when devm_kcalloc() fails to allocate memory for rx_chn->flows in a channel request function. The error path then calls k3_udma_glue_release_rx_chn(), which tries to access the NULL rx_chn->flows pointer in k3_udma_glue_release_rx_flow(), leading to a crash.

Detection Guidance

This vulnerability is specific to the Linux kernel's TI K3 UDMA glue driver and requires kernel-level inspection. Check if your system uses the affected driver by examining kernel logs for errors related to k3-udma-glue or rx_chn. Look for NULL pointer dereference errors in dmesg output.

Impact Analysis

This vulnerability can cause system crashes or kernel panics if the affected driver is used. It may lead to denial of service conditions, requiring a system reboot to restore normal operation. Systems relying on TI K3 UDMA functionality could experience instability.

Compliance Impact

This vulnerability is a NULL pointer dereference in the Linux kernel's DMA engine driver for TI K3 SoCs. It does not directly relate to data privacy, security controls, or compliance requirements under standards like GDPR or HIPAA.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for CVE-2026-98416. If immediate patching is not possible, disable the affected TI K3 UDMA glue driver if not in use to prevent potential crashes.

Hi! I’m here to help you understand CVE-2026-98416. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70