CVE-2026-98207

A flaw was found in the Linux kernel's MultiMediaCard Serial Peripheral Interface MMC SPI driver. A local user or connected device can trigger this flaw during multi-block data transfers that encounter a Cyclic Redundancy Check CRC transmission error. The driver initiates a recovery retry without...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Refcount mechanisms have been implemented to handle unbinding of devices during busy operations. Driver support for indirect read and indirect write operations is provided, assuming that forced removal of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This issue could lead to a null-ptr-deref error if platformgetresourcebyname returns NULL. Therefore, we need to check the return value...

Linux Distros Unpatched Vulnerability : CVE-2026-90410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: davinci: switch to managed controller allocation The controller is allocated with the non-managed spiallochost while the interrupt is registered with...

PT-2026-94781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the oc-tiny SPI driver where the controller is allocated using the non-managed spi alloc host function while the interrupt is registered via devm request irq. During t...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: bcm-qspi: Returns an error if neither “hifmspi” nor “mspi” is available. If either “hifmspi” or “mspi” is not available, the driver will simply exit early during the probe phase, but still return a success status. Apart from...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When the CPU on which the QSPI interrupt handler runs typically CPU 0 is excessively busy, it can lead to rare cases where the IRQ thread does not run before the transfer timeout is reache...

Linux SPI Device Driver Use-After-Free

The vulnerability of the ep93xxspisetupdma function in the drivers/spi/spi-ep93xx.c file of the Linux operating system’s SPI device driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

Linux SPI Buffer Overflow DoS

The vulnerability of the s3c64xxspiremove function in the drivers/spi/spi-s3c64xx.c file of the Linux kernel’s SPI device driver is related to the pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux SPI Driver Heap Buffer Overflow DoS

The vulnerability of the pchspipdremove function in the drivers/spi/spi-topcliff-pch.c driver for Linux SPI devices relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux operating system’s SPI device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the spiimxremove function in the drivers/spi/spi-imx.c module of the Linux operating system’s SPI device driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux SPI Buffer Overflow DoS

The vulnerability of the mchpcoreqspitransferone function in the drivers/spi/spi-microchip-core-qspi.c file of the Linux kernel’s SPI device driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the mpc52xxspiRemove function in the driver/spi/spi-mpc52xx.c file of the Linux kernel’s SPI device driver is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the amlsfcdmabuffersetup function in the drivers/spi/spi-amlogic-spifc-a4.c file of the Linux operating system’s SPI device driver is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

Linux driver/spi/spi.c DoS

The vulnerability of the drivers/spi/spi.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-74276

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

Linux SPI Amlogic Buffer Overflow

The vulnerability of the amlsfcprobe function in the drivers/spi/spi-amlogic-spifc-a4.c driver for Linux SPI devices is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

ROS-20260825-73-0030

The vulnerability of the bcmqspiprobe function in the drivers/spi/spi-bcm-qspi.c file of the Linux kernel’s SPI device driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...