PT-2026-54812 · Linux+1 · Linux Kernel+1
CVE-2026-53344
·
Published
2026-05-25
·
Updated
2026-09-07
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A NULL pointer dereference occurs during the probe process in the pinctrl mcp23s08 driver. This happens because regmap initialization triggers the
regcache maple populate() function, which attempts an SPI read to populate the cache. This SPI read requires the mcp->dev and mcp->addr variables to be initialized; if they are not set before the mcp23s08 spi regmap init() call, the system crashes.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of Uninitialized Resource
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Ubuntu