Vulnerability Bulletins |
CVE-2026-23475 |
|
| Affected software | LINUX KERNEL |
|
In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller has been registered with driver core, which leaves a window where accessing the sysfs attributes can trigger a NULL-pointer dereference. Fix this by moving the statistics allocation to controller allocation while tying its lifetime to that of the controller (rather than using implicit devres). |
|
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-23475 | |