{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-64221",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-64221",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-07-24T15:23:07.502Z",
    "updatedAt": "2026-08-05T12:40:08.448Z",
    "importedAt": "2026-10-24T01:58:25.636Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "spi: ti-qspi: fix use-after-free after DMA setup failure",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: ti-qspi: fix use-after-free after DMA setup failure\n\nThe driver falls back to PIO mode if DMA setup fails during probe.\n\nMake sure to clear the DMA channel pointer also if buffer allocation\nfails to avoid passing a pointer to the released channel to the DMA\nengine (or trying to free the channel a second time on late probe errors\nor driver unbind).\n\nThis issue was flagged by Sashiko when reviewing a devres allocation\nconversion patch.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9c6f306a8140962c7284197db54b96fdb5f468d6"
            },
            {
              "version": "c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83",
              "status": "affected",
              "versionType": "git",
              "lessThan": "3bbbe7ae3fdada0df4157c1ffe989f92dfa8dcd6"
            },
            {
              "version": "c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83",
              "status": "affected",
              "versionType": "git",
              "lessThan": "d6f422b122922d1abee907d673bcc990e5f3672d"
            },
            {
              "version": "c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83",
              "status": "affected",
              "versionType": "git",
              "lessThan": "f2dc841d7dc9063fe9b47ced869b1271e55052ae"
            },
            {
              "version": "c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1cd927002120678bd5d23c760246639caa53040e"
            },
            {
              "version": "c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83",
              "status": "affected",
              "versionType": "git",
              "lessThan": "d7a076fb596c7b408ed6df74793a597990a6d860"
            },
            {
              "version": "c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83",
              "status": "affected",
              "versionType": "git",
              "lessThan": "178b9b570c0f75fa7e691490520328b20d19138e"
            },
            {
              "version": "c687c46e9e4527c4b4d82bc3cca58c1b08bcfb83",
              "status": "affected",
              "versionType": "git",
              "lessThan": "ea6ec3343e05f7937a53eb6d7617b3abdb4abc19"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "4.12",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "4.12"
            },
            {
              "version": "5.10.258",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.209",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.175",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.142",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.92",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.34",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "7.0.11",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.0.*"
            },
            {
              "version": "7.1",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}