What is the CVSS score of CVE-2026-64168?

CVE-2026-64168 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-64168?

Yes, a patch is available for CVE-2026-64168. Update the affected software to the latest version immediately.

Linux Kernel CVE-2026-64168

EUVD-2026-45853 MEDIUM

NULL Pointer Dereference (CWE-476)

2026-07-19 Linux

GHSA-5w89-7hjx-x8fr

Null Pointer Dereference Denial Of Service Linux Red Hat Suse

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

4.7 MEDIUM

AC:H overrides NVD's AC:L because exploitation requires concurrent SPRD hardware presence, DMA allocation failure, and a late probe error; no confidentiality or integrity impact applies.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

MEDIUM

qualitative

Red Hat

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 13, 2026 - 16:13 vuln.today

CVSS changed

Aug 13, 2026 - 15:37 NVD

5.5 (MEDIUM)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:40 nvd

MEDIUM 5.5

CVE Published

Jul 19, 2026 - 15:40 cve.org

UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

spi: sprd: fix error pointer deref after DMA setup failure

The driver falls back to PIO mode if DMA setup fails during probe.

Make sure to check the dma.enabled flag before trying to release the DMA channels also on late probe errors to avoid dereferencing an error pointer (or attempting to release a channel a second time).

This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

AnalysisAI

Error pointer dereference in the Linux kernel's spi-sprd driver causes local denial of service on systems equipped with Spreadtrum (SPRD) SoC hardware. When DMA setup fails during driver probe and the driver falls back to PIO mode, a subsequent late probe error triggers a cleanup path that does not check the dma.enabled flag before attempting to release DMA channels - resulting in an error pointer dereference or double-channel-release and consequent kernel panic. No public exploit exists and EPSS sits at 0.17% (6th percentile), reflecting the highly hardware-specific nature of this flaw. Vendor-released patches are confirmed across multiple Linux stable branches.

Technical ContextAI

The vulnerability resides in the spi-sprd driver within the Linux kernel's SPI (Serial Peripheral Interface) subsystem, targeting Spreadtrum (SPRD) SoC platforms. The driver preferentially uses DMA for SPI transfers but falls back to PIO (Programmed I/O) mode when DMA channel allocation fails at probe time. CWE-476 (NULL Pointer Dereference) is the root cause class: the cleanup path executed on late probe errors unconditionally attempts to release DMA channels without first inspecting the dma.enabled flag. If DMA setup previously failed and set an error state, the cleanup dereferences that error pointer - or attempts to release a channel that was never successfully acquired - triggering a kernel oops. The affected CPE cpe:2.3:a:linux:linux covers Linux kernel versions from commit 386119bc7be9fa5114ced0274a22a943df890b4b onward across stable branches 5.10.x, 5.15.x, 6.1.x, 6.6.x, 6.12.x, 6.18.x, and 7.0.x.

RemediationAI

The primary remediation is to upgrade to a patched kernel version for the relevant stable branch: 5.10.258, 5.15.209, 6.1.175, 6.6.142, 6.12.92, 6.18.34, 7.0.11, or 7.1. Individual stable fixes are available at https://git.kernel.org/stable/c/be74e276111f3c23b8e040c8c5e308f67a573add, https://git.kernel.org/stable/c/a8f233fb0c7be29b97cd249f64120bf35ce72805, and related commits for each branch. Ubuntu users should apply USN-8575-1 as documented at https://ubuntu.com/security/notices/USN-8575-1. As a compensating control for systems that cannot be patched immediately, blacklisting the spi-sprd kernel module via /etc/modprobe.d eliminates the vulnerable code path entirely, though this will disable SPI bus access and any peripherals dependent on it - acceptable only if SPI connectivity is non-critical to the deployment.

Same weakness CWE-476 – NULL Pointer Dereference

View all

CVE-2016-0742 HIGH

7.5

CVE-2014-3470 MEDIUM

4.3

CVE-2017-3730 HIGH POC

7.5

CVE-2017-3169 CRITICAL POC

9.8

CVE-2016-4957 HIGH

7.5

CVE-2015-3194 HIGH

7.5

CVE-2026-21525 MEDIUM

6.2

CVE-2017-0016 MEDIUM

5.9

Same technique Null Pointer Dereference

View all

CVE-2016-0742 HIGH

7.5

CVE-2014-3470 MEDIUM

4.3

CVE-2017-3730 HIGH POC

7.5

CVE-2017-3169 CRITICAL POC

9.8

CVE-2016-4957 HIGH

7.5

CVE-2015-3194 HIGH

7.5

CVE-2026-21525 MEDIUM

6.2

CVE-2017-0016 MEDIUM

5.9

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-64168 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-64168

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-476 – NULL Pointer Dereference

Same technique Null Pointer Dereference

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code