CVE-2026-97507
Linux: media: dm1105: fix missing error check for dma_alloc_coherent
CVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.16%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3ff12d5ea9cb0d0fd89c24b69940f0b989bf6d2aAlso 07d6a76a17b550e94ca5cc0060ad6e77952390f2, 3eaac9e02d8591d3c790db572ef1c8fa5a841fdbCVE List
What fixes it
- 3ff12d5ea9cb0d0fd89c24b69940f0b989bf6d2aLinuxCVE List
- 07d6a76a17b550e94ca5cc0060ad6e77952390f2LinuxCVE List
- 3eaac9e02d8591d3c790db572ef1c8fa5a841fdbLinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
media: dm1105: fix missing error check for dma_alloc_coherent
The return value of dm1105_dma_map(), which handles DMA memory allocation, is ignored in dm1105_hw_init(). If dma_alloc_coherent() fails, the driver will proceed using a NULL pointer for DMA transfers, leading to a kernel oops or invalid hardware access.
Fix this by checking the return value and propagating -ENOMEM on failure.
Text from CVE List
Affected versions 16
- Linuxaffected: a611d0ca006fe76d88b8dd5ac44f4468293b6760 before a2017c80dd7f3c409778ca0898d6e75ccab6d2f2CVE List
- Linuxaffected: a611d0ca006fe76d88b8dd5ac44f4468293b6760 before e96f91da5c83e4c1f1bebe1c58856d02cea4afd9CVE List
- Linuxaffected: a611d0ca006fe76d88b8dd5ac44f4468293b6760 before 3ff12d5ea9cb0d0fd89c24b69940f0b989bf6d2aCVE List
- Linuxaffected: a611d0ca006fe76d88b8dd5ac44f4468293b6760 before b6327023dcc7482156fc13cda6361ee573721b05CVE List
- Linuxaffected: a611d0ca006fe76d88b8dd5ac44f4468293b6760 before 07d6a76a17b550e94ca5cc0060ad6e77952390f2CVE List
- Linuxaffected: a611d0ca006fe76d88b8dd5ac44f4468293b6760 before f3f135c4fac6194933b952e98a15dc05aa420956CVE List
- Linuxaffected: a611d0ca006fe76d88b8dd5ac44f4468293b6760 before 3eaac9e02d8591d3c790db572ef1c8fa5a841fdbCVE List
- Linuxaffected: 2.6.28CVE List
- Linuxunaffected: all versions before 2.6.28CVE List
- Linuxunaffected: 5.10.271 through 5.10.*CVE List
- Linuxunaffected: 5.15.222 through 5.15.*CVE List
- Linuxunaffected: 6.1.189 through 6.1.*CVE List
- Linuxunaffected: 6.6.158 through 6.6.*CVE List
- Linuxunaffected: 6.12.111 through 6.12.*CVE List
- Linuxunaffected: 6.18.53 through 6.18.*CVE List
- Linuxunaffected: 7.2CVE List
References 7
- git.kernel.org/stable/c/a2017c80dd7f3c409778ca0898d6e75ccab6d2f2Referencevia CVE List
- git.kernel.org/stable/c/e96f91da5c83e4c1f1bebe1c58856d02cea4afd9Referencevia CVE List
- git.kernel.org/stable/c/3ff12d5ea9cb0d0fd89c24b69940f0b989bf6d2aReferencevia CVE List
- git.kernel.org/stable/c/b6327023dcc7482156fc13cda6361ee573721b05Referencevia CVE List
- git.kernel.org/stable/c/07d6a76a17b550e94ca5cc0060ad6e77952390f2Referencevia CVE List
- git.kernel.org/stable/c/f3f135c4fac6194933b952e98a15dc05aa420956Referencevia CVE List
- git.kernel.org/stable/c/3eaac9e02d8591d3c790db572ef1c8fa5a841fdbReferencevia CVE List