Improper handling of exceptional conditions in Linux kernel - CVE-2026-64170
Published: July 20, 2026
Vulnerability identifier: #VU138451
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-64170
CWE-ID: CWE-755
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper handling of error pointers in the spi-qup DMA initialization logic when handling DMA setup failures during driver probe. A local user can trigger a DMA setup failure and subsequent probe error or driver unbind to cause a denial of service.
The issue can lead to dereferencing an error pointer or attempting to release a DMA channel a second time.
How to mitigate CVE-2026-64170
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/0bb3bd442f0bdad3932739a61dd6c580c9c1955e
- https://git.kernel.org/stable/c/45760b72e84c1a1498f1a8a9047184c85299da20
- https://git.kernel.org/stable/c/4bb4764f2c51f03f657a28029eb0595d8223aab5
- https://git.kernel.org/stable/c/4f4051e9d644c371c50de4a042b85bba6727d5c3
- https://git.kernel.org/stable/c/8f9b61d255b1e989b8913b06c8ebe0aba5e1b238
- https://git.kernel.org/stable/c/9e673affb92c29d9ba879bf4ea81c5e840166b56
- https://git.kernel.org/stable/c/a7e8f3efd50a165ba0189f6dc57f7e51a7d149db
- https://git.kernel.org/stable/c/d577c55d189e7ae150973058d13e299b6855633f