CVE-2026-98416EPSS p11.6%
CVE-2026-98416CVE-2026-98416
Description
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()
If devm_kcalloc() for rx_chn->flows fails in a channel request function,
the error path calls k3_udma_glue_release_rx_chn(), which dereferences
the NULL rx_chn->flows pointer in k3_udma_glue_release_rx_flow().
Skip the flow release loop in k3_udma_glue_release_rx_chn() when
rx_chn->flows is not allocated.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Scoring
| EPSS | 0.22% probability of exploitation · percentile 11.6% · 2026-10-17T12:00:28Z |
| Last modified | 2026-10-14 |