CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

The vulnerability of the spi_register_controller() function in the drivers/spi/spi.c module of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the spiregistercontroller function in the drivers/spi/spi.c module of the Linux operating system’s SPI device driver lies in the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the mcp251x_open() function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver allows a hacker to cause a service failure.

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This issue could lead to a null-ptr-deref error if platformgetresourcebyname returns NULL. Therefore, we need to check the return value...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU on which the QSPI interrupt handler runs typically CPU 0 is excessively busy, it can lead to rare cases where the IRQ thread does not run before the transfer timeout is reache...

The vulnerability of the mprls0025pa_spi.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mprls0025paspi.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the drivers/spi/spi-wpcm-fiu.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/spi/spi-wpcm-fiu.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-74276

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently...

Linux Distros Unpatched Vulnerability : CVE-2026-72048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ieee802154: ca8210: fix casctl leak on spiasync failure ca8210spitransfer allocates casctl with kzallocobjGFPATOMIC and relies entirely on the SPI completion...

Linux Distros Unpatched Vulnerability : CVE-2026-74415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a...

CVE-2026-72134

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI driver for i.MX systems. When a Direct Memory Access DMA transfer cannot be started, the system attempts to use a Programmed Input/Output PIO transfer instead. However, the SPI controller is not correctly reconfigured for PIO...

CVE-2026-74276

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

CVE-2026-74276

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

CVE-2026-74415

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

CVE-2026-72133

In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devmrequestirq The driver calls devmrequestirq before initializing the completion used by the interrupt handler. Because the interrupt may occur immediately after...

CVE-2026-74415 spi: atcspi200: fix use-after-free when driver unbind

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still ali...

CVE-2026-74276 spi: xilinx: use FIFO occupancy register to determine buffer size

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

EUVD-2026-59423

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

CVE-2026-72133 spi: uniphier: Fix completion initialization order before devm_request_irq()

In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devmrequestirq The driver calls devmrequestirq before initializing the completion used by the interrupt handler. Because the interrupt may occur immediately after...

CVE-2026-72133

CVE-2026-72133 concerns the Linux kernel SPI uniphier driver. The vulnerability arises because devm_request_irq() could be called before init_completion(), allowing an interrupt to occur and the handler to call complete() on an uninitialized completion, causing undefined behavior (observed with K...