CVE-2026-99164

A flaw was found in the Linux kernel's Serial Peripheral Interface (SPI) driver for i.MX devices. The driver allocates Direct Memory Access (DMA) bounce buffers that are smaller than the cache line size used during hardware mapping and synchronization. This size discrepancy causes DMA operations to access memory beyond the allocated buffer boundary, corrupting adjacent kernel memory. An attacker capable of triggering SPI transactions can exploit this vulnerability to cause a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated Moderate because exploitation requires local access, depends on the presence of specialized NXP i.MX hardware controllers, and leads to kernel memory corruption resulting primarily in a denial of service. Standard enterprise server deployments are unaffected as they do not run on i.MX System-on-Chip platforms or initialize this specific peripheral interface. On affected embedded architectures, triggering the out-of-bounds access demands precise timing and heavy bus traffic, making reliable exploitation difficult.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.