Skip to main content

Linux Kernel EUVDEUVD-2026-48643

| CVE-2026-64234 MEDIUM
NULL Pointer Dereference (CWE-476)
2026-07-24 Linux GHSA-hhmc-qrcv-x7hv
Null Pointer Dereference Denial Of Service Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local low-privilege attacker can deliberately induce memory pressure to trigger the NULL return; availability is the sole impact; hardware dependency narrows real-world scope but does not change base metrics.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Aug 12, 2026 - 19:27 vuln.today
CVSS changed
Aug 12, 2026 - 19:22 NVD
5.5 (MEDIUM)
Patch available
Jul 24, 2026 - 17:48 EUVD
CVE Published
Jul 24, 2026 - 15:27 nvd
MEDIUM 5.5
CVE Published
Jul 24, 2026 - 15:27 cve.org
UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

tty: serial: pch_uart: add check for dma_alloc_coherent()

Add a check for dma_alloc_coherent() failure to prevent a potential NULL pointer dereference in dma_handle_rx(). Properly release DMA channels and the PCI device reference using a goto ladder if the allocation fails.

AnalysisAI

NULL pointer dereference in the Linux kernel's pch_uart serial driver allows a local low-privileged user to crash the kernel by triggering a failed DMA memory allocation in dma_handle_rx(). Systems running Intel PCH (Platform Controller Hub) hardware with the pch_uart driver active and DMA enabled are vulnerable to denial of service via kernel panic. No public exploit or CISA KEV listing exists; with an EPSS of 0.17% (6th percentile), real-world exploitation risk is low, but patches are confirmed across multiple stable kernel branches.

Technical ContextAI

The pch_uart driver (drivers/tty/serial/pch_uart.c) handles serial communication for Intel Platform Controller Hub chipsets, found in certain embedded, industrial, and server-class systems. It uses Linux's DMA API to manage receive operations via dma_handle_rx(). The root cause is CWE-476 (NULL Pointer Dereference): dma_alloc_coherent(), which allocates coherent DMA memory, can return NULL on failure (e.g., under memory pressure or DMA zone exhaustion), and the driver did not check this return value before using the pointer in dma_handle_rx(). The fix introduces an allocation failure check and a goto-based cleanup ladder to release DMA channels and the PCI device reference properly. Affected CPE is cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*, with the introduced-in version traced to Linux 2.6.38 per EUVD data.

RemediationAI

The primary fix is upgrading to a patched Linux kernel: 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.93, 6.18.35, 7.0.12, or 7.1, sourced from upstream commits at https://git.kernel.org/stable/c/760df81763b391bb5f0dcb0b7597b736da753ae4 and sibling stable branch commits. Ubuntu users should apply USN-8618-1 via standard package management. If immediate kernel upgrade is not feasible, a targeted compensating control is to unload and blacklist the pch_uart module ('modprobe -r pch_uart' and adding 'blacklist pch_uart' to /etc/modprobe.d/) on any system that does not require Intel PCH serial port functionality; this fully eliminates the vulnerable code path, with the trade-off of losing PCH serial port support. Restricting local user privilege escalation paths as a defense-in-depth measure reduces but does not eliminate exploitation opportunity.

Same weakness CWE-476 – NULL Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Same technique Null Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Micro 6.2 Fixed
openSUSE Leap 16.0 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Server 15 SP7 Affected

Share

EUVD-2026-48643 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy