Use-After-Free Vulnerability in Linux Kernel's TI-QSPI Driver

CVE-2026-64221

What is CVE-2026-64221?

A use-after-free vulnerability has been identified in the TI-QSPI driver within the Linux kernel. The vulnerability arises during the DMA setup process where, upon failure, the system does not properly clear the DMA channel pointer. This oversight may lead to further references of a released channel and subsequent unintended behaviors, raising the risk of security issues. The flaw was highlighted during a review of a devres allocation conversion patch, prompting necessary fixes to enhance stability and security in the affected driver.

References