UnratedFix available
spi: sprd: fix error pointer deref after DMA setup failure
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe errors to avoid dereferencing an error pointer (or attempting to release a channel a second time). This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.258, 5.15.209, 6.1.175, 6.12.92, 6.18.34, 6.6.142, 7.0.11
- CVEs
- CVE-2026-64168
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 00:54 UTC · Revision 1
Source evidence
spi: sprd: fix error pointer deref after DMA setup failure
core-osv · Original sourcePublished 19 Jul 2026, 15:40 UTC
In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe errors to avoid dereferencing an error pointer (or attempting to release a channel a second time). This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.
osv:CVE-2026-64168
Kernel
Fixed versions: 5.10.258, 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11
Complete source record
{
"id": "83046af04bf8ce3a8ae60759c8e51b4e7c875100b06b6ffbea06b8713cce949b",
"url": "https://osv.dev/vulnerability/CVE-2026-64168",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "spi: sprd: fix error pointer deref after DMA setup failure",
"summary": "In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe errors to avoid dereferencing an error pointer (or attempting to release a channel a second time). This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.",
"evidence": "osv:CVE-2026-64168",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.258",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.209",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.175",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.142",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.92",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.34",
"evidence": "/affected/1/ranges"
},
{
"value": "7.0.11",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-64168",
"aliases": [
"CVE-2026-64168"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "386119bc7be9fa5114ced0274a22a943df890b4b"
},
{
"fixed": "be74e276111f3c23b8e040c8c5e308f67a573add"
},
{
"fixed": "a8f233fb0c7be29b97cd249f64120bf35ce72805"
},
{
"fixed": "0cdea166c1a07c200caf9d0b722224fca43b23ae"
},
{
"fixed": "450c319dd04d0eeff4184889768f7ada826a2e35"
},
{
"fixed": "b6f1acf4e57ccf708cdc0cb70f5bb5b65162963b"
},
{
"fixed": "be409d2bbe9ca7da7b05cc7dde7499bc481f0766"
},
{
"fixed": "c33b4496e95d04722055446c0a31213639438536"
},
{
"fixed": "3d67fffb74267772d461c02c67f1eff893ad547d"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64168.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.1.0"
},
{
"fixed": "5.10.258"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.209"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.175"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.142"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.92"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.34"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.0.11"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64168.json"
}
}
],
"modified": "2026-10-28T02:30:48.716744935Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/0cdea166c1a07c200caf9d0b722224fca43b23ae",
"https://git.kernel.org/stable/c/3d67fffb74267772d461c02c67f1eff893ad547d",
"https://git.kernel.org/stable/c/450c319dd04d0eeff4184889768f7ada826a2e35",
"https://git.kernel.org/stable/c/a8f233fb0c7be29b97cd249f64120bf35ce72805",
"https://git.kernel.org/stable/c/b6f1acf4e57ccf708cdc0cb70f5bb5b65162963b",
"https://git.kernel.org/stable/c/be409d2bbe9ca7da7b05cc7dde7499bc481f0766",
"https://git.kernel.org/stable/c/be74e276111f3c23b8e040c8c5e308f67a573add",
"https://git.kernel.org/stable/c/c33b4496e95d04722055446c0a31213639438536",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64168.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64168",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64168.json"
}
},
"related_cves": [
{
"value": "CVE-2026-64168",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 516776,
"published_at": "2026-07-19T15:40:52.741+00:00"
}