Linux Kernel Vulnerability in DMA Memory Allocation via DM1105 Driver

CVE-2026-97507

What is CVE-2026-97507?

A vulnerability in the DM1105 driver of the Linux kernel arises from insufficient error handling during DMA memory allocation. The return value of the dma_alloc_coherent() function is ignored, which can result in the driver utilizing a NULL pointer for DMA transfers if the memory allocation fails. This oversight can lead to critical system failures, such as kernel oops or unauthorized hardware access. The vulnerability has been addressed by implementing proper checks on the return value to ensure safer operations.

References