Security Flaw in Linux Kernel Affecting SPI Driver Functionality

CVE-2026-64169

What is CVE-2026-64169?

A vulnerability exists in the Linux kernel's SPI driver, where an error pointer may be dereferenced after a failure in direct memory access (DMA) setup. When the DMA setup fails during probe, the driver falls back to programmable input/output (PIO) mode without properly clearing the DMA channel pointers. This oversight can lead to dereferencing an invalid pointer during subsequent probe errors or driver unbind processes, posing potential stability and security concerns within the Linux environment.

References