Driver Vulnerability in Linux Kernel for QUP SPI Interface

CVE-2026-64170

What is CVE-2026-64170?

In the Linux kernel, a significant issue was identified regarding the QUP SPI interface driver, where a fallback mechanism to PIO mode could result in dereferencing an error pointer. This problem arises when DMA setup fails during the driver's initialization process. To mitigate this, it is essential to clear the DMA channel pointers to avoid potential errors on subsequent probe attempts or when unbinding the driver. This vulnerability was highlighted during a review of a development resource allocation conversion patch, bringing attention to the need for secure coding practices to enhance driver reliability.

References