CVE-2026-64303

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the fsl-lpspi SPI driver where the RX channel is not terminated when the TX prepare failure path is triggered. Specifically, if the dmaengine prep slave sg() function fails for the TX channel, the error path terminates the TX DMA channel but allows the RX channel to remain active. Because the RX channel is submitted and issued before the TX descriptor is prepared, returning -EINVAL leads the SPI core to unmap DMA buffers while the RX DMA engine continues writing to them. This can result in memory corruption or a use-after-free condition, where the system attempts to use memory that has already been released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.