CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2026-64170
Medium (5.5) in linux linux kernel. EPSS 0.1% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved:
spi: qup: fix error pointer deref after DMA setup failure
The driver falls back to PIO mode if DMA setup fails during probe.
Make sure to the clear the DMA channel pointers on setup failure to
avoid dereferencing an error pointer (or attempting to release a channel
a second time) on later probe errors or driver unbind.
This issue was flagged by Sashiko when reviewing a devres allocation
conversion patch.
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
- CWE
- CWE-476
- Published
- Modified
- Record from
- the NVD, synced
Affected
- linux:linux_kernel
References
- https://git.kernel.org/stable/c/0bb3bd442f0bdad3932739a61dd6c580c9c1955e
- https://git.kernel.org/stable/c/45760b72e84c1a1498f1a8a9047184c85299da20
- https://git.kernel.org/stable/c/4bb4764f2c51f03f657a28029eb0595d8223aab5
- https://git.kernel.org/stable/c/4f4051e9d644c371c50de4a042b85bba6727d5c3
- https://git.kernel.org/stable/c/8f9b61d255b1e989b8913b06c8ebe0aba5e1b238