---
id: CVE-2026-64170
title: 'spi: qup: fix error pointer deref after DMA setup failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  spi: qup: fix error pointer deref after DMA setup failure

  The driver falls back to PIO mode if DMA setup fails during probe.

  Make sure to the clear the DMA channel po…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 <
    0bb3bd442f0bdad3932739a61dd6c580c9c1955e
  - >-
    Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 <
    d577c55d189e7ae150973058d13e299b6855633f
  - >-
    Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 <
    9e673affb92c29d9ba879bf4ea81c5e840166b56
  - >-
    Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 <
    45760b72e84c1a1498f1a8a9047184c85299da20
  - >-
    Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 <
    8f9b61d255b1e989b8913b06c8ebe0aba5e1b238
  - >-
    Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 <
    4bb4764f2c51f03f657a28029eb0595d8223aab5
  - >-
    Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 <
    4f4051e9d644c371c50de4a042b85bba6727d5c3
  - >-
    Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 <
    a7e8f3efd50a165ba0189f6dc57f7e51a7d149db
  - Linux 4.1
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:30:52.320884Z'
published: '2026-07-19'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:34:27.530Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-64170'
references:
  - url: 'https://git.kernel.org/stable/c/0bb3bd442f0bdad3932739a61dd6c580c9c1955e'
  - url: 'https://git.kernel.org/stable/c/d577c55d189e7ae150973058d13e299b6855633f'
  - url: 'https://git.kernel.org/stable/c/9e673affb92c29d9ba879bf4ea81c5e840166b56'
  - url: 'https://git.kernel.org/stable/c/45760b72e84c1a1498f1a8a9047184c85299da20'
  - url: 'https://git.kernel.org/stable/c/8f9b61d255b1e989b8913b06c8ebe0aba5e1b238'
  - url: 'https://git.kernel.org/stable/c/4bb4764f2c51f03f657a28029eb0595d8223aab5'
  - url: 'https://git.kernel.org/stable/c/4f4051e9d644c371c50de4a042b85bba6727d5c3'
  - url: 'https://git.kernel.org/stable/c/a7e8f3efd50a165ba0189f6dc57f7e51a7d149db'
tags:
  - cve.org
epss: 0.00114
epssPercentile: 0.01496
ingestedAt: '2026-11-06T16:57:43.227Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

spi: qup: fix error pointer deref after DMA setup failure

The driver falls back to PIO mode if DMA setup fails during probe.

Make sure to the clear the DMA channel pointers on setup failure to
avoid dereferencing an error pointer (or attempting to release a channel
a second time) on later probe errors or driver unbind.

This issue was flagged by Sashiko when reviewing a devres allocation
conversion patch.

## Affected

- `Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 < 0bb3bd442f0bdad3932739a61dd6c580c9c1955e`
- `Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 < d577c55d189e7ae150973058d13e299b6855633f`
- `Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 < 9e673affb92c29d9ba879bf4ea81c5e840166b56`
- `Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 < 45760b72e84c1a1498f1a8a9047184c85299da20`
- `Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 < 8f9b61d255b1e989b8913b06c8ebe0aba5e1b238`
- `Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 < 4bb4764f2c51f03f657a28029eb0595d8223aab5`
- `Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 < 4f4051e9d644c371c50de4a042b85bba6727d5c3`
- `Linux >= 612762e82ae6058d69b4ce734598491bf030afe7 < a7e8f3efd50a165ba0189f6dc57f7e51a7d149db`
- `Linux 4.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.