NULL pointer dereference in Linux kernel - CVE-2026-64169

Vulnerability identifier: #VU138450

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-64169

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of error pointers in the ep93xx SPI driver DMA channel setup logic when handling DMA setup failures during device probe or later driver cleanup paths. A local user can trigger DMA setup failure conditions to cause a denial of service.

The driver may later dereference an error pointer during subsequent probe error handling or driver unbind after falling back to PIO mode.

Linux kernel
Ubuntu
linux-ibm (Ubuntu package)
linux-azure (Ubuntu package)
linux-aws (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-nvidia-bos (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux-ibm (Ubuntu package) - addressed in versions 7.0.0-1008.8, 7.0.0-1010.10
linux-azure (Ubuntu package) - addressed in versions 7.0.0-1009.9, 7.0.0-1010.10
linux-aws (Ubuntu package) - addressed in versions 7.0.0-1009.9, 7.0.0-1015.15
linux-nvidia (Ubuntu package) - addressed in versions 7.0.0-1016.16, 7.0.0-1016.16~24.04.1
linux-nvidia-bos (Ubuntu package) - update to 7.0.0-2016.16

• https://git.kernel.org/stable/c/0e2189ab095e3657f37b8295f3f2bbcde0f27529
• https://git.kernel.org/stable/c/5e121a81667a83e9a01d62b429e340f5a4a84abc
• https://git.kernel.org/stable/c/8e027db9fa310b1d5e7ad928510be800c4f004d9
• https://git.kernel.org/stable/c/b6c0dabea07e25bd7db19a77ebfd0d02b9e2671a

• NULL pointer dereference in Linux kernel spi driver
• Ubuntu update for linux-ibm
• Ubuntu update for linux-azure
• Ubuntu update for linux-aws
• Ubuntu update for linux-nvidia-bos
• Ubuntu update for linux-nvidia