CVE Database›Document archive›CVE-2026-64168

CVE-2026-64168

kernel: spi: sprd: fix error pointer deref after DMA setup failure

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · July 21, 2026

Description

A flaw was found in the Linux kernel's spi-sprd driver. This vulnerability occurs when the driver attempts to release Direct Memory Access (DMA) channels after a DMA setup failure during the probe phase. Without properly checking if DMA is enabled, the driver may try to dereference an invalid pointer or release an already released channel, which can lead to system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference