CVE-2026-64221
Received Received - Intake

SPI Use-After-Free in TI QSPI Driver

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to the released channel to the DMA engine (or trying to free the channel a second time on late probe errors or driver unbind). This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-64221
EUVD
EUVD-2026-48629

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free vulnerability in the Linux kernel's TI QSPI driver. It occurs when DMA setup fails during driver probe, causing the driver to fall back to PIO mode. The issue arises because the DMA channel pointer is not cleared when buffer allocation fails, leading to potential use of a freed pointer or double-free errors during DMA operations or driver unbind.

Detection Guidance

This vulnerability is specific to the Linux kernel's spi: ti-qspi driver and involves a use-after-free issue during DMA setup failures. Detection requires checking kernel logs for DMA-related errors or crashes during driver initialization. Commands like dmesg | grep -i qspi or journalctl -k | grep -i qspi may reveal issues.

Impact Analysis

This vulnerability could cause system instability, crashes, or unexpected behavior in systems using the TI QSPI driver with DMA functionality. It may lead to kernel panics, data corruption, or security issues if exploited to execute arbitrary code with kernel privileges.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. If using a custom kernel, ensure the spi: ti-qspi driver is updated to handle DMA failures safely. Monitor kernel logs for DMA-related errors after updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64221. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart