Vulnerability details
CVE-2026-68466
Linux Linux
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
CVSS 3.1
8.8High
Official description
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout lpc32xx_xmit_dma() waits for the DMA completion callback but ignores wait_for_completion_timeout(). A timed out DMA transfer is therefore unmapped and reported as successful to the NAND read/write path. Return -ETIMEDOUT when the completion wait expires. Terminate the DMA channel before unmapping the scatterlist so the timed out transfer cannot continue to access the buffer after the error is returned.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 3.7 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2944a44da09e46b6db2fd2c3334f242b09e05c43 ≤ v < c367af37ce7238c96c6071337149099467160746 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2944a44da09e46b6db2fd2c3334f242b09e05c43 ≤ v < 623c4d8e740debb4af28981e3d4e209f9d0260a4 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2944a44da09e46b6db2fd2c3334f242b09e05c43 ≤ v < bd4a622786f92e1f183f7557ab89dd32891cef60 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2944a44da09e46b6db2fd2c3334f242b09e05c43 ≤ v < 307e4f4c1d4e1575b3495ecc6e41aa2adc40f491 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2944a44da09e46b6db2fd2c3334f242b09e05c43 ≤ v < cf7258f57d18026b8f77c0e80ff1805e9caf7250 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2944a44da09e46b6db2fd2c3334f242b09e05c43 ≤ v < cb2031f8b226efbd13735c07b075e5f14ec11f6d | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2944a44da09e46b6db2fd2c3334f242b09e05c43 ≤ v < 17a8ce84964f243c8f89dc7353ac7e8d3137bc74 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 2944a44da09e46b6db2fd2c3334f242b09e05c43 ≤ v < 8f5c3ee53a5dc1a0f7cfd780485f2c8b5d17f91d | CVEProject cvelistV5 (CNA) |
References and advisories
8- https://git.kernel.org/stable/c/307e4f4c1d4e1575b3495ecc6e41aa2adc40f491
- https://git.kernel.org/stable/c/c367af37ce7238c96c6071337149099467160746
- https://git.kernel.org/stable/c/623c4d8e740debb4af28981e3d4e209f9d0260a4
- https://git.kernel.org/stable/c/bd4a622786f92e1f183f7557ab89dd32891cef60
- https://git.kernel.org/stable/c/8f5c3ee53a5dc1a0f7cfd780485f2c8b5d17f91d
- https://git.kernel.org/stable/c/cf7258f57d18026b8f77c0e80ff1805e9caf7250
- https://git.kernel.org/stable/c/cb2031f8b226efbd13735c07b075e5f14ec11f6d
- https://git.kernel.org/stable/c/17a8ce84964f243c8f89dc7353ac7e8d3137bc74
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-08-15
- Last updated
- 2026-08-17
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.12%
Probability of exploitation in 30 days
2.5%
Percentile (among all CVEs)
Weaknesses (CWE)
- —