CVE-2026-90012

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SPI subsystem where a partial failure during DMA mapping can lead to incorrect ownership of the mapping. Specifically, if an RX mapping fails after a TX mapping succeeds, the spi map msg() function unmaps the TX but fails to clear the tx sg mapped flag. This can result in subsequent calls to spi unmap msg() attempting to unmap the TX mapping again or releasing mappings using a NULL or stale device. A NULL device dereference in dma unmap sg attrs() can trigger an oops, which is a kernel panic or error caused by an invalid memory access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.