Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-53344

pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init Regmap initialization triggers regcache_maple_populate() which attempts SPI read to populate cache. SPI read requires mcp->dev and mcp->addr to be set, without them, NULL pointer dereference occurs during probe. Move initialization before mcp23s08_spi_regmap_init() call.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f9f4fda15e720686f1b2b436591ab11255e4e85e to < 3a13bb9540dfd7014c5601608afcbbadbbcfd673affected
  • f9f4fda15e720686f1b2b436591ab11255e4e85e to < 8473c3a197b57ff01396f7a2ec6ddf65383820d4affected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 7.0.13 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References