CVE-2026-64170

spi: qup: fix error pointer deref after DMA setup failure

State: Published
Severity: Not scored
Published: Jul 19, 2026
Updated: Jul 19, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: qup: fix error pointer deref after DMA setup failure

The driver falls back to PIO mode if DMA setup fails during probe.

Make sure to the clear the DMA channel pointers on setup failure to avoid dereferencing an error pointer (or attempting to release a channel a second time) on later probe errors or driver unbind.

This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	612762e82ae6058d69b4ce734598491bf030afe7 to before 0bb3bd442f0bdad3932739a61dd6c580c9c1955eAffected 612762e82ae6058d69b4ce734598491bf030afe7 to before d577c55d189e7ae150973058d13e299b6855633fAffected 612762e82ae6058d69b4ce734598491bf030afe7 to before 9e673affb92c29d9ba879bf4ea81c5e840166b56Affected 612762e82ae6058d69b4ce734598491bf030afe7 to before 45760b72e84c1a1498f1a8a9047184c85299da20Affected 612762e82ae6058d69b4ce734598491bf030afe7 to before 8f9b61d255b1e989b8913b06c8ebe0aba5e1b238Affected 612762e82ae6058d69b4ce734598491bf030afe7 to before 4bb4764f2c51f03f657a28029eb0595d8223aab5Affected 612762e82ae6058d69b4ce734598491bf030afe7 to before 4f4051e9d644c371c50de4a042b85bba6727d5c3Affected 612762e82ae6058d69b4ce734598491bf030afe7 to before a7e8f3efd50a165ba0189f6dc57f7e51a7d149dbAffected
LinuxLinux	4.1Affected before 4.1Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.176 through 6.1.Not affected 6.6.142 through 6.6.Not affected 6.12.92 through 6.12.Not affected 6.18.34 through 6.18.Not affected 7.0.11 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

612762e82ae6058d69b4ce734598491bf030afe7 to before 0bb3bd442f0bdad3932739a61dd6c580c9c1955eAffected
612762e82ae6058d69b4ce734598491bf030afe7 to before d577c55d189e7ae150973058d13e299b6855633fAffected
612762e82ae6058d69b4ce734598491bf030afe7 to before 9e673affb92c29d9ba879bf4ea81c5e840166b56Affected
612762e82ae6058d69b4ce734598491bf030afe7 to before 45760b72e84c1a1498f1a8a9047184c85299da20Affected
612762e82ae6058d69b4ce734598491bf030afe7 to before 8f9b61d255b1e989b8913b06c8ebe0aba5e1b238Affected
612762e82ae6058d69b4ce734598491bf030afe7 to before 4bb4764f2c51f03f657a28029eb0595d8223aab5Affected
612762e82ae6058d69b4ce734598491bf030afe7 to before 4f4051e9d644c371c50de4a042b85bba6727d5c3Affected
612762e82ae6058d69b4ce734598491bf030afe7 to before a7e8f3efd50a165ba0189f6dc57f7e51a7d149dbAffected

LinuxLinux

4.1Affected
before 4.1Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.176 through 6.1.*Not affected
6.6.142 through 6.6.*Not affected
6.12.92 through 6.12.*Not affected
6.18.34 through 6.18.*Not affected
7.0.11 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.