CVE-2026-80752

Input: psxpad-spi - set driver data before use

HIGH
8.4
CVSS Score
Published: September 3, 2026 at 08:26 AM UTC
Updated: September 4, 2026 at 05:24 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH8.4
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad_spi_suspend() retrieves the controller state with spi_get_drvdata(), but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.12 ≤ v < 5.10.2664.12 ≤ v < 5.15.2174.12 ≤ v < 6.1.1844.12 ≤ v < 6.12.1054.12 ≤ v < 6.18.464.12 ≤ v < 6.6.1534.12 ≤ v < 7.1.104.12 ≤ v < 7.24.128be193c7b1f44d3f4dcb27107df0831709c2deb1
Vendor states this is fixed in 1bba6bd6861b1e0c8ecf20cd1892f0d3877c02a2 (fixed)
Vendor states this is fixed in 1edcb7ffee7ac4dc35cbe5bbd0e27bac3614ebe4 (fixed)
Vendor states this is fixed in 62e25677d1440085381b047ec4984be9b6793759 (fixed)
Vendor states this is fixed in 732f38c36059e68ba3b4b89c56911d777fd3185c (fixed)
Vendor states this is fixed in 86531cdfb3a03213e2569deed5195412a4e3f7ee (fixed)
Vendor states this is fixed in 8d622c58205adbc8af19864e277386528b671345 (fixed)
Vendor states this is fixed in da6b8b05db0cf43e0cc198431fa8ee9739b3b817 (fixed)
Vendor states this is fixed in e980066e434a9c74ff1665ed9140427e95b0ee7c (fixed)
Vendor states this is fixed in 4.12 (unaffected)
Vendor states this is fixed in 5.10.266 (unaffected)
Vendor states this is fixed in 5.15.217 (unaffected)
Vendor states this is fixed in 6.1.184 (unaffected)
Vendor states this is fixed in 6.12.105 (unaffected)
Vendor states this is fixed in 6.18.46 (unaffected)
Vendor states this is fixed in 6.6.153 (unaffected)
Vendor states this is fixed in 7.1.10 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

CVSS

8.4HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card