CVE-2026-64234

Analyzed Analyzed - Analysis Complete

NULL Pointer Dereference in Linux Kernel pch_uart Driver

Publication date: 2026-07-24

Last updated on: 2026-08-12

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent() Add a check for dma_alloc_coherent() failure to prevent a potential NULL pointer dereference in dma_handle_rx(). Properly release DMA channels and the PCI device reference using a goto ladder if the allocation fails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-24

Last Modified

2026-08-12

Generated

2026-08-14

AI Q&A

2026-07-24

EPSS Evaluated

2026-08-12

NVD

CVE-2026-64234

EUVD

EUVD-2026-48643

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 5.16 (inc) to 6.1.176 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.35 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.143 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.93 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.210 (exc)
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.12 (exc)
linux	linux_kernel	From 2.6.38 (inc) to 5.10.259 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's tty serial subsystem, specifically in the pch_uart driver. It occurs when dma_alloc_coherent() fails to allocate memory, leading to a potential crash if the code attempts to use the NULL pointer in dma_handle_rx(). The fix adds proper error checking and ensures DMA channels and PCI device references are released correctly.

Detection Guidance

This vulnerability is specific to the Linux kernel's pch_uart driver and involves a potential NULL pointer dereference due to a failed dma_alloc_coherent() call. Detection requires checking kernel logs for DMA allocation failures or NULL pointer dereferences in the pch_uart driver.

Impact Analysis

If exploited, this vulnerability could cause a system crash or denial of service by triggering a NULL pointer dereference in the kernel. Systems using the pch_uart driver with DMA functionality may be affected. However, exploitation requires specific conditions and is not trivial.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other common standards and regulations. The issue is a NULL pointer dereference in the Linux kernel's serial driver due to a failed DMA allocation, which could lead to system instability or crashes. Compliance impacts would only occur if this vulnerability were exploited to cause data breaches or unauthorized access, which is not described in the provided context.

Mitigation Strategies

Update the Linux kernel to the patched version that includes the fix for CVE-2026-64234. Monitor system logs for DMA allocation failures in the pch_uart driver.

Hi! I’m here to help you understand CVE-2026-64234. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70