CVE-2026-68466

Received Received - Intake

Linux Kernel DMA Timeout in mtd NAND Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout lpc32xx_xmit_dma() waits for the DMA completion callback but ignores wait_for_completion_timeout(). A timed out DMA transfer is therefore unmapped and reported as successful to the NAND read/write path. Return -ETIMEDOUT when the completion wait expires. Terminate the DMA channel before unmapping the scatterlist so the timed out transfer cannot continue to access the buffer after the error is returned.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-05

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-68466

EUVD

EUVD-2026-59088

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's mtd subsystem, specifically in the lpc32xx_slc NAND controller driver. It involves a DMA transfer completion timeout issue where the function lpc32xx_xmit_dma() waits for a DMA completion callback but ignores the timeout result. This causes the system to treat a timed-out DMA transfer as successful, leading to potential data corruption or system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's mtd subsystem, particularly the lpc32xx_slc NAND driver. Detection requires checking kernel logs for DMA timeout errors related to NAND operations on affected systems. No direct network detection commands are applicable.

Impact Analysis

This vulnerability could lead to data corruption or system crashes if a DMA transfer times out but is incorrectly reported as successful. It may cause applications relying on NAND storage to malfunction or lose data. Systems using the affected Linux kernel version with lpc32xx_slc NAND controller are at risk.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a specific Linux kernel NAND driver issue. Compliance impacts would depend on system-specific implementations and data handling practices rather than this technical flaw.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Monitor kernel logs for NAND DMA timeout errors. If using affected hardware, consider disabling the lpc32xx_slc driver until patched.

Hi! I’m here to help you understand CVE-2026-68466. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70