CVE-2026-23475
In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller has been registered with driver core, which leaves a window where accessing the sysfs attributes can trigger a NULL-pointer dereference. Fix this by moving the statistics allocation to controller allocation while tying its lifetime to that of the controller (rather than using implicit devres).
Fraqueza
In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller has been registered with driver core, which leaves a window where accessing the sysfs attributes can trigger a NULL-pointer dereference. Fix this by moving the statistics allocation to controller allocation while tying its lifetime to that of the controller (rather than using implicit devres).
Produtos afetados
- linux linux_kernel
Referências
- https://git.kernel.org/stable/c/118ce777d39f03cac99231196f820e4f998613a8
- https://git.kernel.org/stable/c/378b295f67102eef78cf2c28105f60ae1dab5cc1
- https://git.kernel.org/stable/c/80c5bd0dca1cc5526ae0f4b273ccd163ed4caa4e
- https://git.kernel.org/stable/c/dee0774bbb2abb172e9069ce5ffef579b12b3ae9
- https://git.kernel.org/stable/c/df30056c78e8bead02d4be020199cabdbec0fef1
- https://git.kernel.org/stable/c/f13100b1f5f111989f0750540a795fdef47492af
Encontre a falha antes de um atacante.
Entre com o GitHub e rode sua primeira auditoria em menos de um minuto. O plano gratuito não exige cartão de crédito.