CVE-2026-64169: spi: ep93xx: fix error pointer deref after DMA setup failure
In the Linux kernel, the following vulnerability has been resolved:
spi: ep93xx: fix error pointer deref after DMA setup failure
The driver falls back to PIO mode if DMA setup fails during probe.
Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error pointer on later probe errors or driver unbind.
This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure the Linux kernel SPI ep93xx driver is updated to the patch titled "spi: ep93xx: fix error pointer deref after DMA setup failure" so that DMA channel pointers are cleared on setup failure to prevent later dereferencing of an error pointer during subsequent probe errors or driver unbind/conversion.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64169?
CVE-2026-64169 has a risk rating of 27, indicating a moderate severity level.
How do I fix CVE-2026-64169?
To fix CVE-2026-64169, ensure that your system kernel is updated to the version where this vulnerability has been addressed.
What systems are affected by CVE-2026-64169?
CVE-2026-64169 affects systems using the Linux kernel where the spi: ep93xx driver is utilized.
What is the main issue described in CVE-2026-64169?
CVE-2026-64169 addresses an issue where error pointer dereferencing can occur after a DMA setup failure in the spi: ep93xx driver.
Is CVE-2026-64169 a critical vulnerability?
CVE-2026-64169 is not classified as critical but presents potential risks that should be mitigated through appropriate kernel updates.