CVE-2026-46203

Updated on 28 May 2026

Severity

7.1 High severity

Details

CVSS score
7.1

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: fix unclocked access on unbind Make sure that the controller is runtime resumed before disabling it during driver unbind to avoid an unclocked register access. This issue was flagged by Sashiko when reviewing a controller deregistration fix. A flaw was found in the Linux kernel, specifically within the spi: cadence-quadspi driver. This vulnerability occurs when the controller is not properly runtime resumed before being disabled during driver unbind, leading to unclocked register access. A local attacker could potentially exploit this to cause system instability or a denial of service.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Planned