CVEvulnerability

CVE-2026-53344

5.5 MEDIUM Published 2026-07-01 Modified 2026-07-23 Official page ↗
Status
Analyzed
Published
2026-07-01
Last modified
2026-07-23
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-908

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init Regmap initialization triggers regcache_maple_populate() which attempts SPI read to populate cache. SPI read requires mcp->dev and mcp->addr to be set, without them, NULL pointer dereference occurs during probe. Move initialization before mcp23s08_spi_regmap_init() call.

Affected configurations

• linux linux kernel (>= 6.19 < 7.0.13) • linux linux kernel 7.1

Related

Weakness · CWE (1)

  • CWE-908 Use of Uninitialized Resource weakness

References