CVE-2026-97507: media: dm1105: fix missing error check for dma_alloc_coherent

Published Sep 24, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

media: dm1105: fix missing error check for dmaalloccoherent

The return value of dm1105dmamap(), which handles DMA memory allocation, is ignored in dm1105hwinit(). If dmaalloccoherent() fails, the driver will proceed using a NULL pointer for DMA transfers, leading to a kernel oops or invalid hardware access.

Fix this by checking the return value and propagating -ENOMEM on failure.

Affected Software

1 affected component
Linux Linux kernel

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Compensating control

    In dm1105_hw_init(), check the return value of dm1105_dma_map() and propagate -ENOMEM when dma_alloc_coherent() fails, preventing DMA transfers from using a NULL pointer.

Event History

Sep 24, 2026
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
Description
Data Sourced
via NVD·05:17 PM
Description

Frequently Asked Questions

1

What conditions are required to trigger the failure?

The dm1105 driver must be initialized and its coherent DMA memory allocation must fail. The affected initialization path previously ignored the allocation failure and continued with a NULL DMA pointer.

2

What is the likely impact if the allocation fails on an unpatched kernel?

The driver may use a NULL pointer for DMA transfers, causing a kernel oops or invalid hardware access. The fix instead propagates -ENOMEM and stops initialization when DMA allocation fails.

3

How can administrators tell whether the fix is present?

Check whether the kernel includes the dm1105 change that verifies the return value of dm1105_dma_map() in dm1105_hw_init() and returns -ENOMEM on failure. The provided stable commit references identify versions containing the correction.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203