Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-07-24T00:00:00 kernel: Linux kernel: spi: ti-qspi use-after-free allows privilege escalation or denial of service 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-825

In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to the released channel to the DMA engine (or trying to free the channel a second time on late probe errors or driver unbind). This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

A flaw was found in the `spi: ti-qspi` component of the Linux kernel. This use-after-free vulnerability occurs when the driver attempts to fall back to PIO mode after a Direct Memory Access (DMA) setup failure during probe. If the DMA channel pointer is not properly cleared after a buffer allocation failure, it can lead to the use of a freed memory region. This could allow a local attacker to cause a denial of service or potentially escalate privileges.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-64221 https://nvd.nist.gov/vuln/detail/CVE-2026-64221 https://lore.kernel.org/linux-cve-announce/2026072416-CVE-2026-64221-299d@gregkh/T