CVE-2026-23475
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
spi: fix statistics allocation
In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller has been registered with driver core, which leaves a window where accessing the sysfs attributes can trigger a NULL-pointer dereference. Fix this by moving the statistics allocation to controller allocation while tying its lifetime to that of the controller (rather than using implicit devres).
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 | affected | git | 80c5bd0dca1cc5526ae0f4b273ccd163ed4caa4e | Unavailable | None listed |
| 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 | affected | git | f13100b1f5f111989f0750540a795fdef47492af | Unavailable | None listed |
| 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 | affected | git | df30056c78e8bead02d4be020199cabdbec0fef1 | Unavailable | None listed |
| 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 | affected | git | 378b295f67102eef78cf2c28105f60ae1dab5cc1 | Unavailable | None listed |
| 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 | affected | git | 118ce777d39f03cac99231196f820e4f998613a8 | Unavailable | None listed |
| 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 | affected | git | dee0774bbb2abb172e9069ce5ffef579b12b3ae9 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.0 | Unavailable | None listed |
| 6.1.167 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.130 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.78 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.20 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 6.19.10 | unaffected | semver | Unavailable | 6.19.* | None listed |
| 7.0 | unaffected | original_commit_for_fix | Unavailable | * | None listed |