{"api_version":"1","generated_at":"2026-07-20T14:43:03+00:00","cve":"CVE-2026-64169","urls":{"html":"https://cve.report/CVE-2026-64169","api":"https://cve.report/api/cve/CVE-2026-64169.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-64169","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-64169"},"summary":{"title":"spi: ep93xx: fix error pointer deref after DMA setup failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: ep93xx: fix error pointer deref after DMA setup failure\n\nThe driver falls back to PIO mode if DMA setup fails during probe.\n\nMake sure to the clear the DMA channel pointers on setup failure to\navoid dereferencing an error pointer on later probe errors or driver\nunbind.\n\nThis issue was flagged by Sashiko when reviewing a devres allocation\nconversion patch.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-07-19 16:17:59","updated_at":"2026-07-19 16:17:59"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/b6c0dabea07e25bd7db19a77ebfd0d02b9e2671a","name":"https://git.kernel.org/stable/c/b6c0dabea07e25bd7db19a77ebfd0d02b9e2671a","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/8e027db9fa310b1d5e7ad928510be800c4f004d9","name":"https://git.kernel.org/stable/c/8e027db9fa310b1d5e7ad928510be800c4f004d9","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/0e2189ab095e3657f37b8295f3f2bbcde0f27529","name":"https://git.kernel.org/stable/c/0e2189ab095e3657f37b8295f3f2bbcde0f27529","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/5e121a81667a83e9a01d62b429e340f5a4a84abc","name":"https://git.kernel.org/stable/c/5e121a81667a83e9a01d62b429e340f5a4a84abc","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64169","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64169","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e79e7c2df6277ee1ad9364a231f6183da4492415 b6c0dabea07e25bd7db19a77ebfd0d02b9e2671a git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e79e7c2df6277ee1ad9364a231f6183da4492415 8e027db9fa310b1d5e7ad928510be800c4f004d9 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e79e7c2df6277ee1ad9364a231f6183da4492415 0e2189ab095e3657f37b8295f3f2bbcde0f27529 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e79e7c2df6277ee1ad9364a231f6183da4492415 5e121a81667a83e9a01d62b429e340f5a4a84abc git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.12","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.92 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.34 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.0.11 7.0.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.1 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/spi/spi-ep93xx.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b6c0dabea07e25bd7db19a77ebfd0d02b9e2671a","status":"affected","version":"e79e7c2df6277ee1ad9364a231f6183da4492415","versionType":"git"},{"lessThan":"8e027db9fa310b1d5e7ad928510be800c4f004d9","status":"affected","version":"e79e7c2df6277ee1ad9364a231f6183da4492415","versionType":"git"},{"lessThan":"0e2189ab095e3657f37b8295f3f2bbcde0f27529","status":"affected","version":"e79e7c2df6277ee1ad9364a231f6183da4492415","versionType":"git"},{"lessThan":"5e121a81667a83e9a01d62b429e340f5a4a84abc","status":"affected","version":"e79e7c2df6277ee1ad9364a231f6183da4492415","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/spi/spi-ep93xx.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.12"},{"lessThan":"6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.92","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.34","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.92","versionStartIncluding":"6.12","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.34","versionStartIncluding":"6.12","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.11","versionStartIncluding":"6.12","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","versionStartIncluding":"6.12","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: ep93xx: fix error pointer deref after DMA setup failure\n\nThe driver falls back to PIO mode if DMA setup fails during probe.\n\nMake sure to the clear the DMA channel pointers on setup failure to\navoid dereferencing an error pointer on later probe errors or driver\nunbind.\n\nThis issue was flagged by Sashiko when reviewing a devres allocation\nconversion patch."}],"providerMetadata":{"dateUpdated":"2026-07-19T15:40:54.092Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/b6c0dabea07e25bd7db19a77ebfd0d02b9e2671a"},{"url":"https://git.kernel.org/stable/c/8e027db9fa310b1d5e7ad928510be800c4f004d9"},{"url":"https://git.kernel.org/stable/c/0e2189ab095e3657f37b8295f3f2bbcde0f27529"},{"url":"https://git.kernel.org/stable/c/5e121a81667a83e9a01d62b429e340f5a4a84abc"}],"title":"spi: ep93xx: fix error pointer deref after DMA setup failure","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-64169","datePublished":"2026-07-19T15:40:54.092Z","dateReserved":"2026-07-19T07:54:57.038Z","dateUpdated":"2026-07-19T15:40:54.092Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-07-19 16:17:59","lastModifiedDate":"2026-07-19 16:17:59","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"64169","Ordinal":"1","Title":"spi: ep93xx: fix error pointer deref after DMA setup failure","CVE":"CVE-2026-64169","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"64169","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: ep93xx: fix error pointer deref after DMA setup failure\n\nThe driver falls back to PIO mode if DMA setup fails during probe.\n\nMake sure to the clear the DMA channel pointers on setup failure to\navoid dereferencing an error pointer on later probe errors or driver\nunbind.\n\nThis issue was flagged by Sashiko when reviewing a devres allocation\nconversion patch.","Type":"Description","Title":"spi: ep93xx: fix error pointer deref after DMA setup failure"}]}}}