CVE-2026-98416
priority · track · 0EPSS 0.002 · 12 %ileDEFREPSS · scored 2026-10-22
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() If devm_kcalloc() for rx_chn->flows fails in a channel request function, the error path calls k3_udma_glue_release_rx_chn(), which dereferences the NULL rx_chn->flows pointer in k3_udma_glue_release_rx_flow(). Skip the flow release loop in k3_udma_glue_release_rx_chn() when rx_chn->flows is not allocated. Found by Linux Verification Center (linuxtesting.org) with SVACE.
cvss
Technical severity, 0–10. One row per scoring source.
No CVSS score recorded.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-3951Linux Kernel: Mehrere SchwachstellenDeutsch2026-10-14csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Angriff auszulösen, Daten zu manipulieren oder offenzulegen oder Sicherheitsmaßnahmen zu umgehen.
- CERTFR-2026-AVI-1374Multiples vulnérabilités dans le noyau Linux de DebianFrançais2026-10-23vendor · certfrFR
- CERTFR-2026-AVI-1375Multiples vulnérabilités dans le noyau Linux de Debian LTSFrançais2026-10-23vendor · certfrFR
sources
Which sources assert this record, and when.
references (8) nvd
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/0294b6dd515256c03ea2dbf508ddd3826d788579
- https://git.kernel.org/stable/c/5a6cb4d387eebf7d32a6ed3fcd39f94bf38bd134
- https://git.kernel.org/stable/c/5b2d92b7b177226e1dca2e80dc8369131276c2a4
- https://git.kernel.org/stable/c/89f5414660724bb562db4ac74665da16d4a57d99
- https://git.kernel.org/stable/c/967612574c542dec71f820a6eb16dea80dd187a1
- https://git.kernel.org/stable/c/b14e6c52872556de2d6c137531e0ce85085c10ed
- https://git.kernel.org/stable/c/b2985956e06632939bee47cee13bccd78ad7c3a1
- https://git.kernel.org/stable/c/b51ed7885ab0e8ecad765adc13b465cb1498cdc9
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan