DMA Mapping Vulnerability in Linux Kernel by Linux Foundation

CVE-2026-90012

What is CVE-2026-90012?

A vulnerability in the Linux kernel's SPI subsystem can lead to improper handling of DMA mappings during transmission and reception operations. Specifically, when a failure occurs in the RX mapping after successful TX mapping, the system may leave active mappings for previous transfers that were not correctly unmounted. This mismanagement can cause the subsequent calls to spi_unmap_msg() to reference stale or NULL devices, potentially resulting in system crashes. By addressing this issue through improved mapping ownership protocols and better management of DMA devices, the risk associated with these failures can be significantly mitigated.

References