PT-2026-54812 · Linux+1 · Linux Kernel+1

CVE-2026-53344

·

Published

2026-05-25

·

Updated

2026-09-07

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer dereference occurs during the probe process in the pinctrl mcp23s08 driver. This happens because regmap initialization triggers the regcache maple populate() function, which attempts an SPI read to populate the cache. This SPI read requires the mcp->dev and mcp->addr variables to be initialized; if they are not set before the mcp23s08 spi regmap init() call, the system crashes.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13862
CVE-2026-53344
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu