CVE-2026-72134

A flaw was found in the Linux kernel's Serial Peripheral Interface (SPI) driver for i.MX systems. When a Direct Memory Access (DMA) transfer cannot be started, the system attempts to use a Programmed Input/Output (PIO) transfer instead. However, the SPI controller is not correctly reconfigured for PIO mode, leading to corruption of transferred data. This can result in data integrity issues and device malfunction.

Red Hat rates this vulnerability as a Moderate severity impact because triggering the condition requires specific hardware configurations and local system access, limiting the failure domain to corrupted SPI bus communications. The flaw is constrained to embedded platforms utilizing NXP i.MX serial peripheral controllers where direct memory access preparation fails and falls back to programmed I/O. Supported Red Hat Enterprise Linux releases do not incorporate the upstream code changes that introduced this bug, meaning supported environments are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.