Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This will cause a null‑ptr‑deref if platformgetresourcebyname returns NULL; we must check the return value...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Refcount mechanisms have been implemented to handle unbinding of devices during busy operations. Driver support for indirect read and indirect write operations is provided, assuming that forced removal of...

CVE-2026-98207

A flaw was found in the Linux kernel's MultiMediaCard Serial Peripheral Interface MMC SPI driver. A local user or connected device can trigger this flaw during multi-block data transfers that encounter a Cyclic Redundancy Check CRC transmission error. The driver initiates a recovery retry without...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fixed NULL dereferencing on driver unbind. A change that moved DMA channel allocation from probe back to s3c64xxspipreparetransfer failed to remove the corresponding deallocation from remove. The bogus DMA channel...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU on which the QSPI interrupt handler runs typically CPU 0 is excessively busy, it can lead to rare cases where the IRQ thread does not run before the transfer timeout is reache...

Linux Distros Unpatched Vulnerability : CVE-2026-90410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: davinci: switch to managed controller allocation The controller is allocated with the non-managed spiallochost while the interrupt is registered with...

PT-2026-94781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the oc-tiny SPI driver where the controller is allocated using the non-managed spi alloc host function while the interrupt is registered via devm request irq. During t...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: Returns an error if neither “hifmspi” nor “mspi” is available. If either “hifmspi” or “mspi” is not available, the driver will simply exit early during the probe phase, but still return a success status. Apart from...

Linux SPI Device Driver Use-After-Free

The vulnerability of the ep93xxspisetupdma function in the drivers/spi/spi-ep93xx.c file of the Linux operating system’s SPI device driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

Linux SPI Driver Heap Buffer Overflow DoS

The vulnerability of the pchspipdremove function in the drivers/spi/spi-topcliff-pch.c driver for Linux SPI devices relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux operating system’s SPI device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel SPI Buffer Overflow DoS

The vulnerability in the s3c64xxspiremove function within the drivers/spi/spi-s3c64xx.c file of the Linux kernel’s SPI driver is related to dereferencing a pointer. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Linux SPI Buffer Overflow DoS

The vulnerability of the mchpcoreqspitransferone function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux kernel’s SPI device driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel SPI Buffer Overflow

The vulnerability in the spiimxremove function within drivers/spi/spi-imx.c of the Linux kernel’s SPI driver is related to errors occurring during link counter updates. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux kernel’s SPI device driver is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

Linux driver/spi/spi.c DoS

The vulnerability of the drivers/spi/spi.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the amlsfcdmabuffersetup function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

SUSE CVE-2026-74276

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

Linux SPI Amlogic Buffer Overflow

The vulnerability of the amlsfcprobe function in the drivers/spi/spi-amlogic-spifc-a4.c driver for Linux SPI devices is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...