In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When… (CVE-2026-64303)
A vulnerability in the Linux kernel's spi: fsl-lpspi driver was resolved. The issue occurs when the TX DMA channel preparation fails, causing the RX DMA channel to continue running and write to unmapped memory buffers. This can lead to memory corruption or use-after-free conditions. The fix ensures the RX channel is terminated properly on TX prepare failure.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's spi: fsl-lpspi driver arises because when dmaengine_prep_slave_sg() fails for the TX channel, the error handling path terminates the TX DMA channel but leaves the RX DMA channel running. Since the RX channel was already started before the TX descriptor preparation, returning an error (-EINVAL) causes the SPI core to unmap DMA buffers while the RX DMA engine continues writing to them. This results in potential memory corruption or use-after-free. The patch terminates the RX channel before returning on the TX prepare failure path to prevent this unsafe state.
Potential Impact
Potential memory corruption or use-after-free conditions in the Linux kernel's SPI driver can lead to system instability or crashes. No information about exploitation in the wild is available.
Mitigation Recommendations
A fix has been implemented to terminate the RX DMA channel on TX prepare failure. Users should apply the official Linux kernel update that includes this patch to remediate the vulnerability. Patch status is not explicitly confirmed in the provided data; check the vendor or kernel mailing list advisories for the exact fixed versions and update accordingly.
In the Linux kernel, the following vulnerability has been resolved: spi: fsl-lpspi: terminate the RX channel on TX prepare failure path When… (CVE-2026-64303)
Description
A vulnerability in the Linux kernel's spi: fsl-lpspi driver was resolved. The issue occurs when the TX DMA channel preparation fails, causing the RX DMA channel to continue running and write to unmapped memory buffers. This can lead to memory corruption or use-after-free conditions. The fix ensures the RX channel is terminated properly on TX prepare failure.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's spi: fsl-lpspi driver arises because when dmaengine_prep_slave_sg() fails for the TX channel, the error handling path terminates the TX DMA channel but leaves the RX DMA channel running. Since the RX channel was already started before the TX descriptor preparation, returning an error (-EINVAL) causes the SPI core to unmap DMA buffers while the RX DMA engine continues writing to them. This results in potential memory corruption or use-after-free. The patch terminates the RX channel before returning on the TX prepare failure path to prevent this unsafe state.
Potential Impact
Potential memory corruption or use-after-free conditions in the Linux kernel's SPI driver can lead to system instability or crashes. No information about exploitation in the wild is available.
Mitigation Recommendations
A fix has been implemented to terminate the RX DMA channel on TX prepare failure. Users should apply the official Linux kernel update that includes this patch to remediate the vulnerability. Patch status is not explicitly confirmed in the provided data; check the vendor or kernel mailing list advisories for the exact fixed versions and update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8g65-pg22-jqr9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64303"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420e9c2644c7f808601e
Added to database: 07/25/2026, 23:09:02 UTC
Last enriched: 07/25/2026, 23:37:21 UTC
Last updated: 07/26/2026, 03:59:42 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.