CVE-2026-80712

CVE-2026-80712 is a bug in the Linux kernel's spi-qpic-snand driver where the feature value is written to NAND_FLASH_FEATURES only after the SET_FEATURE command has already been submitted and executed, causing an off-by-one: each register write lands one operation late. This went unnoticed until ...

EUVD-2026-67447

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...