CVE-2026-23475

N/A

Beschreibung

In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller has been registered with driver core, which leaves a window where accessing the sysfs attributes can trigger a NULL-pointer dereference. Fix this by moving the statistics allocation to controller allocation while tying its lifetime to that of the controller (rather than using implicit devres).

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht4/3/2026

Zuletzt geandert4/3/2026

Quellenvd

Honeypot-Sichtungen0

Referenzen

https://git.kernel.org/stable/c/118ce777d39f03cac99231196f820e4f998613a8(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/378b295f67102eef78cf2c28105f60ae1dab5cc1(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/80c5bd0dca1cc5526ae0f4b273ccd163ed4caa4e(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/dee0774bbb2abb172e9069ce5ffef579b12b3ae9(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/df30056c78e8bead02d4be020199cabdbec0fef1(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/f13100b1f5f111989f0750540a795fdef47492af(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.