In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to the released channel to the DMA engine (or trying to free the channel a second time on late probe errors or driver unbind). This issue was flagged by Sashiko when reviewing a devres allocation conversion patch.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099700 advisory.

    In the Linux kernel, the following vulnerability has been resolved:

    spi: ti-qspi: fix use-after-free after DMA setup failure

    The driver falls back to PIO mode if DMA setup fails during probe.

    Make sure to clear the DMA channel pointer also if buffer allocation     fails to avoid passing a pointer to the released channel to the DMA     engine (or trying to free the channel a second time on late probe errors     or driver unbind).

    This issue was flagged by Sashiko when reviewing a devres allocation     conversion patch.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup     fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid     passing a pointer to the released channel to the DMA engine (or trying to free the channel a second time     on late probe errors or driver unbind). This issue was flagged by Sashiko when reviewing a devres     allocation conversion patch. (CVE-2026-64221)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
336370	Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099700)	Nessus	Unity Linux Local Security Checks	Local	high
335080	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)	Nessus	SuSE Local Security Checks	Local	high
333944	Photon OS 5.0: Linux PHSA-2026-5.0-92-0864	Nessus	PhotonOS Local Security Checks	Local	high
333941	Photon OS 5.0: Linux PHSA-2026-5.0-92-0926	Nessus	PhotonOS Local Security Checks	Local	high
330197	Linux Distros Unpatched Vulnerability : CVE-2026-64221	Nessus	Misc.	Local	high
329326	Photon OS 5.0: Linux PHSA-2026-5.0-0926	Nessus	PhotonOS Local Security Checks	Local	high
318773	Photon OS 5.0: Linux PHSA-2026-5.0-0864	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2026-64221

high

Tenable Plugins

high

high

high

high

high

high

high