PT-2026-64336

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ti-qspi SPI driver. The driver is designed to fall back to PIO Programmed Input/Output mode if DMA Direct Memory Access setup fails during the probe...

Linux Distros Unpatched Vulnerability : CVE-2023-53658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: bcm-qspi: return error if neither hifmspi nor mspi is available If neither a hifmspi nor mspi resource is present, the driver will just early exit in probe...

SUSE CVE-2023-53658

In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: return error if neither hifmspi nor mspi is available If neither a "hifmspi" nor "mspi" resource is present, the driver will just early exit in probe but still return success. Apart from not doing anything...

CVE-2023-53658

CVE-2023-53658 affects the Linux kernel BCM-QSPI SPI driver (spi/bcm-qspi). If neither hif_mspi nor mspi resources exist, probe may succeed while doing nothing, then removal dereferences a NULL drvdata pointer. The fix unconditionally calls devm_ioremap_resource(), which handles NULL resources an...

PT-2025-20493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the spi: fsl-qspi driver, where the use of devm APIs to manage resources and the legacy remove function cou...

CVE-2022-49475 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname It will cause null-ptr-deref if platformgetresourcebyname returns NULL, we need check the return value...

SUSE CVE-2024-26806

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks The -runtimesuspend and -runtimeresume callbacks are not expected to call spicontrollersuspend and spicontrollerresume. Remove calls to those in the...

CVE-2024-26806 spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-qspi: remove system-wide suspend helper calls from runtime PM hooks The -runtimesuspend and -runtimeresume callbacks are not expected to call spicontrollersuspend and spicontrollerresume. Remove calls to those in the...