Improper control of a resource through its lifetime in Linux kernel - CVE-2026-64303
Published: July 27, 2026
Vulnerability identifier: #VU139673
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-64303
CWE-ID: CWE-664
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause memory corruption or trigger a use-after-free.
The vulnerability exists due to improper resource shutdown in the fsl-lpspi dma transfer error path in drivers/spi/spi-fsl-lpspi.c when preparing a tx dma descriptor after the rx dma channel has already been submitted and issued. A local user can trigger a tx prepare failure during a spi dma transfer to cause memory corruption or trigger a use-after-free.
The issue occurs because the spi core unmaps dma buffers after the error is returned while the rx dma engine may continue writing to those buffers.
Affected software
Linux kernel
How to mitigate CVE-2026-64303
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/01980b5da56e573d62798d0ff6c86bcaa2b22cbe
- https://git.kernel.org/stable/c/808033d80d5c9f8adf7e8de9317389270ce13430
- https://git.kernel.org/stable/c/9d000bdd250d649a11cd7f733175686877344582
- https://git.kernel.org/stable/c/ad370d1c7a9a832f77b2341513cd31188c9443af
- https://git.kernel.org/stable/c/af39a2698f69b584d14a00cffe0f51a2caa15337
- https://git.kernel.org/stable/c/cce2063404b2341e7b2bbf85eddfcd70a31a0033
- https://git.kernel.org/stable/c/d5c1060218a3749c8a18b36f8169d910fce20639
- https://git.kernel.org/stable/c/e65505d91fa036a238968e4c10744244d1b968c4