CVE-2026-46192

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description An issue exists in the microchip-core-qspi component of the SPI subsystem. The driver incorrectly attempts to transmit garbage data during emulated read-only dual or quad operations to generate clock cycles. Because QSPI lacks a dedicated master-out line similar to MOSI in standard SPI, this transmission can cause the transfer to fail or lead the core to lose track of the data direction (sending versus receiving).

Recommendations Update to a version of the Linux kernel where the microchip-core-qspi driver no longer transmits data during emulated read-only operations. Update openSUSE Tumbleweed to kernel-devel-7.0.11-1.1.