CVEvulnerability
CVE-2026-46203
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-05-28
- Last modified
- 2026-06-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- Weaknesses
- CWE-125
Description
In the Linux kernel, the following vulnerability has been resolved:
spi: cadence-quadspi: fix unclocked access on unbind
Make sure that the controller is runtime resumed before disabling it
during driver unbind to avoid an unclocked register access.
This issue was flagged by Sashiko when reviewing a controller
deregistration fix.
Affected configurations
• linux linux kernel (>= 6.7 < 7.0.9)
• linux linux kernel 7.1
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://git.kernel.org/stable/c/233db2cb14db8b1935dda52a6affd97276462b82 Patch
- https://git.kernel.org/stable/c/2e7cd62c37f51823c2bb79de1d4d76d0c1678c7e git.kernel.org
- https://git.kernel.org/stable/c/63a9f6012f453578898c9fcc13c8452a8651104e git.kernel.org
- https://git.kernel.org/stable/c/d67a5311818b3e6481a1e4293c9337ebfee73111 Patch