CVE-2026-68466

A flaw was found in the Linux kernel's lpc32xx_slc driver, which manages NAND flash memory. This vulnerability occurs because the driver fails to properly handle Direct Memory Access (DMA) transfer timeouts. When a DMA transfer times out, the driver incorrectly reports it as successful and unmaps the associated memory buffer without terminating the DMA channel. This can lead to the system attempting to access an unmapped memory region, potentially causing data corruption or system instability.

This vulnerability is rated as Moderate severity because it requires local access and is restricted to platforms utilizing specialized NXP LPC32xx embedded hardware, limiting the potential denial-of-service impact to systems containing these physical controllers. Red Hat Enterprise Linux does not support this embedded SoC architecture, and the associated raw NAND storage driver is not compiled into Red Hat kernels. As a result, supported Red Hat enterprise environments do not package the affected code and are not impacted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.