CVE-2026-23475
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-04-03
Modified: 2026-11-10
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller has been registered with driver core, which leaves a window where accessing the sysfs attributes can trigger a NULL-pointer dereference. Fix this by moving the statistics allocation to controller allocation while tying its lifetime to that of the controller (rather than using implicit devres).
Weakness Classification (1)
Affected Software (19)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < 80c5bd0dca1cc5526ae0f4b273ccd163ed4caa4e |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < f13100b1f5f111989f0750540a795fdef47492af |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < df30056c78e8bead02d4be020199cabdbec0fef1 |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < 378b295f67102eef78cf2c28105f60ae1dab5cc1 |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < 118ce777d39f03cac99231196f820e4f998613a8 |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < dee0774bbb2abb172e9069ce5ffef579b12b3ae9 |
| Linux | Linux | 6.0 |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < 80c5bd0dca1cc5526ae0f4b273ccd163ed4caa4e |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < f13100b1f5f111989f0750540a795fdef47492af |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < df30056c78e8bead02d4be020199cabdbec0fef1 |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < 378b295f67102eef78cf2c28105f60ae1dab5cc1 |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < 118ce777d39f03cac99231196f820e4f998613a8 |
| Linux | Linux | 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 < dee0774bbb2abb172e9069ce5ffef579b12b3ae9 |
| Linux | Linux | 6.0 |
| linux | linux_kernel | 6.0 – 6.1.167 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |