Riskcovery

CVE-2026-64168

spi: sprd: fix error pointer deref after DMA setup failure

State
Published
Severity
Not scored
Published
Jul 19, 2026
Updated
Jul 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: sprd: fix error pointer deref after DMA setup failure

The driver falls back to PIO mode if DMA setup fails during probe.

Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe errors to avoid dereferencing an error pointer (or attempting to release a channel a second time).

This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 386119bc7be9fa5114ced0274a22a943df890b4b to before be74e276111f3c23b8e040c8c5e308f67a573addAffected
  • 386119bc7be9fa5114ced0274a22a943df890b4b to before a8f233fb0c7be29b97cd249f64120bf35ce72805Affected
  • 386119bc7be9fa5114ced0274a22a943df890b4b to before 0cdea166c1a07c200caf9d0b722224fca43b23aeAffected
  • 386119bc7be9fa5114ced0274a22a943df890b4b to before 450c319dd04d0eeff4184889768f7ada826a2e35Affected
  • 386119bc7be9fa5114ced0274a22a943df890b4b to before b6f1acf4e57ccf708cdc0cb70f5bb5b65162963bAffected
  • 386119bc7be9fa5114ced0274a22a943df890b4b to before be409d2bbe9ca7da7b05cc7dde7499bc481f0766Affected
  • 386119bc7be9fa5114ced0274a22a943df890b4b to before c33b4496e95d04722055446c0a31213639438536Affected
  • 386119bc7be9fa5114ced0274a22a943df890b4b to before 3d67fffb74267772d461c02c67f1eff893ad547dAffected
LinuxLinux
  • 5.1Affected
  • before 5.1Not affected
  • 5.10.258 through 5.10.*Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.142 through 6.6.*Not affected
  • 6.12.92 through 6.12.*Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.