In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout… (CVE-2026-68466)
A vulnerability in the Linux kernel's mtd: rawnand: lpc32xx_slc driver was resolved. The issue involved the lpc32xx_xmit_dma() function waiting for DMA completion but ignoring the timeout, causing timed-out DMA transfers to be unmapped yet reported as successful. This could lead to continued access of buffers after an error condition. The fix returns an error on timeout and terminates the DMA channel before unmapping to prevent further access.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-68466 affects the mtd: rawnand: lpc32xx_slc driver. The function lpc32xx_xmit_dma() waits for DMA completion but does not properly handle wait_for_completion_timeout(), resulting in timed-out DMA transfers being unmapped and falsely reported as successful. This flaw allows the DMA channel to continue accessing buffers after a timeout error. The resolution involves returning -ETIMEDOUT when the wait expires and terminating the DMA channel before unmapping the scatterlist, preventing further unauthorized buffer access.
Potential Impact
The vulnerability could cause the DMA transfer to continue accessing memory buffers after a timeout error, potentially leading to data corruption or unintended memory access in the NAND read/write path. This undermines the reliability and correctness of DMA operations in the affected driver.
Mitigation Recommendations
A fix has been implemented that returns an error code (-ETIMEDOUT) when the DMA completion wait times out and terminates the DMA channel before unmapping the buffer. Users should apply the official Linux kernel update that includes this fix to resolve the vulnerability. Patch status is not explicitly confirmed in the provided data, so users should verify with the Linux kernel vendor advisory for the exact patch availability and version details.
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout… (CVE-2026-68466)
Description
A vulnerability in the Linux kernel's mtd: rawnand: lpc32xx_slc driver was resolved. The issue involved the lpc32xx_xmit_dma() function waiting for DMA completion but ignoring the timeout, causing timed-out DMA transfers to be unmapped yet reported as successful. This could lead to continued access of buffers after an error condition. The fix returns an error on timeout and terminates the DMA channel before unmapping to prevent further access.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-68466 affects the mtd: rawnand: lpc32xx_slc driver. The function lpc32xx_xmit_dma() waits for DMA completion but does not properly handle wait_for_completion_timeout(), resulting in timed-out DMA transfers being unmapped and falsely reported as successful. This flaw allows the DMA channel to continue accessing buffers after a timeout error. The resolution involves returning -ETIMEDOUT when the wait expires and terminating the DMA channel before unmapping the scatterlist, preventing further unauthorized buffer access.
Potential Impact
The vulnerability could cause the DMA transfer to continue accessing memory buffers after a timeout error, potentially leading to data corruption or unintended memory access in the NAND read/write path. This undermines the reliability and correctness of DMA operations in the affected driver.
Mitigation Recommendations
A fix has been implemented that returns an error code (-ETIMEDOUT) when the DMA completion wait times out and terminates the DMA channel before unmapping the buffer. Users should apply the official Linux kernel update that includes this fix to resolve the vulnerability. Patch status is not explicitly confirmed in the provided data, so users should verify with the Linux kernel vendor advisory for the exact patch availability and version details.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-wm8j-p6wj-jp9x
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-68466"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b79bf8831d539502b02
Added to database: 08/15/2026, 15:53:29 UTC
Last enriched: 08/15/2026, 17:12:12 UTC
Last updated: 08/15/2026, 18:53:19 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.