CVE-2026-64234

tty: serial: pch_uart: add check for dma_alloc_coherent()

MEDIUM
5.5
CVSS Score
Published: July 24, 2026 at 03:27 PM UTC
Updated: August 12, 2026 at 07:28 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent() Add a check for dma_alloc_coherent() failure to prevent a potential NULL pointer dereference in dma_handle_rx(). Properly release DMA channels and the PCI device reference using a goto ladder if the allocation fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.38 ≤ v < 5.10.2592.6.38 ≤ v < 5.15.2102.6.38 ≤ v < 6.1.1762.6.38 ≤ v < 6.12.932.6.38 ≤ v < 6.18.352.6.38 ≤ v < 6.6.1432.6.38 ≤ v < 7.0.122.6.38 ≤ v < 7.15.11 ≤ v < 5.15.2105.16 ≤ v < 6.1.1766.13 ≤ v < 6.18.356.19 ≤ v < 7.0.126.2 ≤ v < 6.6.1436.7 ≤ v < 6.12.933c6a483275f47a2ef7119309ad3d791c10cf30da7.1 rc17.1 rc27.1 rc37.1 rc47.1 rc5
Vendor states this is fixed in 5f2e2a240dc1846e049bc67e9c3cdf5b031d08bf (fixed)
Vendor states this is fixed in 66f8bfea055b23719b4fd6ce207c44de37d82a59 (fixed)
Vendor states this is fixed in 6dd5c0ea139b586ad5a091677056dafd405cfe82 (fixed)
Vendor states this is fixed in 6fe472c1bbbe238e91141f7cabc1226e96a60d43 (fixed)
Vendor states this is fixed in 760df81763b391bb5f0dcb0b7597b736da753ae4 (fixed)
Vendor states this is fixed in d846df2dfbc2469a688833b4cc4f8aa80672bde8 (fixed)
Vendor states this is fixed in d8d53a343ebe74274ca17b1e1993042e99f8c863 (fixed)
Vendor states this is fixed in daea997bb244aeb50cbb2e5e075fb446a6cf068f (fixed)
Vendor states this is fixed in 2.6.38 (unaffected)
Vendor states this is fixed in 5.10.259 (unaffected)
Vendor states this is fixed in 5.15.210 (unaffected)
Vendor states this is fixed in 6.1.176 (unaffected)
Vendor states this is fixed in 6.12.93 (unaffected)
Vendor states this is fixed in 6.18.35 (unaffected)
Vendor states this is fixed in 6.6.143 (unaffected)
Vendor states this is fixed in 7.0.12 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-476

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card