CVE-2026-64169
Received Received - Intake

SPI DMA Setup Failure in Linux Kernel

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error pointer on later probe errors or driver unbind. This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64169
EUVD
EUVD-2026-45854

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a driver for the EP93xx SPI controller. If DMA setup fails during driver initialization, the driver attempts to fall back to PIO mode. However, it fails to clear the DMA channel pointers, which can lead to dereferencing an error pointer in subsequent operations or during driver unbind, potentially causing undefined behavior or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's spi ep93xx driver and relates to DMA setup failures. Detection would require checking kernel logs for DMA-related errors during driver initialization or probing. Look for messages indicating DMA setup failures in the spi ep93xx driver.

Impact Analysis

This vulnerability may cause system instability or crashes if the affected SPI driver encounters DMA setup failures. Users relying on EP93xx SPI devices could experience unexpected failures during driver initialization or unbind operations, leading to disruptions in device functionality.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is specific to the Linux kernel's SPI driver (ep93xx) and involves a DMA setup failure in PIO mode fallback. There is no indication of data exposure or privacy implications.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for this issue. If using a custom or older kernel, apply the patch that clears DMA channel pointers on setup failure. Monitor kernel logs for DMA errors in the spi ep93xx driver.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64169. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart