CVE-2026-64234
Received Received - Intake

NULL Pointer Dereference in Linux Kernel pch_uart Driver

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent() Add a check for dma_alloc_coherent() failure to prevent a potential NULL pointer dereference in dma_handle_rx(). Properly release DMA channels and the PCI device reference using a goto ladder if the allocation fails.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-64234
EUVD
EUVD-2026-48643

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
linux_kernel linux_kernel *
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's tty serial subsystem, specifically in the pch_uart driver. It occurs when dma_alloc_coherent() fails to allocate memory, leading to a potential crash if the code attempts to use the NULL pointer in dma_handle_rx(). The fix adds proper error checking and ensures DMA channels and PCI device references are released correctly.

Detection Guidance

This vulnerability is specific to the Linux kernel's pch_uart driver and involves a potential NULL pointer dereference due to a failed dma_alloc_coherent() call. Detection requires checking kernel logs for DMA allocation failures or NULL pointer dereferences in the pch_uart driver.

Impact Analysis

If exploited, this vulnerability could cause a system crash or denial of service by triggering a NULL pointer dereference in the kernel. Systems using the pch_uart driver with DMA functionality may be affected. However, exploitation requires specific conditions and is not trivial.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other common standards and regulations. The issue is a NULL pointer dereference in the Linux kernel's serial driver due to a failed DMA allocation, which could lead to system instability or crashes. Compliance impacts would only occur if this vulnerability were exploited to cause data breaches or unauthorized access, which is not described in the provided context.

Mitigation Strategies

Update the Linux kernel to the patched version that includes the fix for CVE-2026-64234. Monitor system logs for DMA allocation failures in the pch_uart driver.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64234. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart