CVE-2026-64168: spi: sprd: fix error pointer deref after DMA setup failure
In the Linux kernel, the following vulnerability has been resolved:
spi: sprd: fix error pointer deref after DMA setup failure
The driver falls back to PIO mode if DMA setup fails during probe.
Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe errors to avoid dereferencing an error pointer (or attempting to release a channel a second time).
This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the spi: sprd driver, before trying to release DMA resources/channels, check the dma.enabled flag to ensure DMA is actually enabled/active; do not attempt to release DMA after a DMA setup failure.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64168?
CVE-2026-64168 has a risk rating of 16.
How do I fix CVE-2026-64168?
To address CVE-2026-64168, ensure that you are using the patched version of the Linux kernel which resolves the DMA setup failure issues.
What systems are affected by CVE-2026-64168?
CVE-2026-64168 affects certain configurations of the Linux kernel that utilize the SPI driver with DMA capabilities.
What is the impact of CVE-2026-64168?
CVE-2026-64168 can lead to a denial of service due to an error pointer dereference if DMA setup fails.
When was CVE-2026-64168 published?
CVE-2026-64168 was published on July 19, 2026.