Null Dereference Vulnerability in Linux Kernel Affecting TI k3-udma-glue

CVE-2026-98416

What is CVE-2026-98416?

A null dereference vulnerability has been identified in the Linux kernel's k3-udma-glue module. When the devm_kcalloc() function fails during a channel request for rx_chn->flows, the error handling inadvertently triggers a dereference of a null pointer. This occurs in the k3_udma_glue_release_rx_flow function, leading to potential system instability. To mitigate this issue, it is necessary to implement a check to skip the flow release loop if the rx_chn->flows pointer is not allocated, thereby preventing the null dereference scenario.

References