CVE-2026-99164

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI driver for i.MX devices. The driver allocates Direct Memory Access DMA bounce buffers that are smaller than the cache line size used during hardware mapping and synchronization. This size discrepancy causes DMA operations to...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind The change moving DMA channel allocation from probe back to s3c64xxspipreparetransfer failed to remove the corresponding deallocation from remove. Remove the bogus DMA channel release...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This will cause a null‑ptr‑deref if platformgetresourcebyname returns NULL; we must check the return value...

Astra Linux – vulnerability in linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU on which the QSPI interrupt handler runs typically CPU 0 is excessively busy, it can occasionally cause the IRQ thread to fail to execute before the transfer timeout is reache...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return error if neither hifmspi nor mspi is available If neither a “hifmspi” nor “mspi” resource is present, the driver simply exits early during the probe, yet still returns success. Aside from doing nothing...

CVE-2026-98207

A flaw was found in the Linux kernel's MultiMediaCard Serial Peripheral Interface MMC SPI driver. A local user or connected device can trigger this flaw during multi-block data transfers that encounter a Cyclic Redundancy Check CRC transmission error. The driver initiates a recovery retry without...

Linux Distros Unpatched Vulnerability : CVE-2026-90410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: davinci: switch to managed controller allocation The controller is allocated with the non-managed spiallochost while the interrupt is registered with...

PT-2026-94781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the oc-tiny SPI driver where the controller is allocated using the non-managed spi alloc host function while the interrupt is registered via devm request irq. During t...

Linux kernel SPI driver Heap Buffer Overflow DoS

The vulnerability in the ep93xxspisetupdma function within the drivers/spi/spi-ep93xx.c file of the Linux kernel’s SPI driver is related to dereferencing an invalid pointer. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

Linux kernel SPI driver Heap Buffer Overflow DoS

The vulnerability in the mpc52xxspiremove function within the drivers/spi/spi-mpc52xx.c file of the Linux kernel’s SPI driver is related to the reuse of previously freed memory. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability...

Linux kernel SPI Buffer Overflow

The vulnerability in the pchspipdremove function within the drivers/spi/spi-topcliff-pch.c file of the Linux kernel’s SPI driver is related to the reuse of previously freed memory. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality, integrity, and...

Linux kernel SPI Buffer Overflow DoS

The vulnerability in the s3c64xxspiremove function within the drivers/spi/spi-s3c64xx.c file of the Linux kernel’s SPI driver is related to dereferencing a pointer. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Linux SPI Buffer Overflow DoS

The vulnerability of the mchpcoreqspitransferone function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux kernel’s SPI device driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux kernel’s SPI device driver is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel SPI Buffer Overflow

The vulnerability in the spiimxremove function within drivers/spi/spi-imx.c of the Linux kernel’s SPI driver is related to errors occurring during link counter updates. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the amlsfcdmabuffersetup function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

Linux kernel SPI DoS

The vulnerability in the drivers/spi/spi.c component of the Linux kernel system is related to pointer dereferencing errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

SUSE CVE-2026-74276

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...