CVE-2026-68466: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout
lpc32xxxmitdma() waits for the DMA completion callback but ignores waitforcompletiontimeout(). A timed out DMA transfer is therefore unmapped and reported as successful to the NAND read/write path.
Return -ETIMEDOUT when the completion wait expires. Terminate the DMA channel before unmapping the scatterlist so the timed out transfer cannot continue to access the buffer after the error is returned.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68466?
The severity of CVE-2026-68466 is rated at 34.
How do I fix CVE-2026-68466?
To fix CVE-2026-68466, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2026-68466?
CVE-2026-68466 affects systems running vulnerable versions of the Linux kernel related to mtd and rawnand components.
What type of vulnerability is CVE-2026-68466?
CVE-2026-68466 is a vulnerability in the Linux kernel that involves a failure in DMA transfer on completion timeout.
What potential impact does CVE-2026-68466 have on my system?
The potential impact of CVE-2026-68466 includes unhandled timeout situations leading to data loss or corruption during DMA operations.