CVE-2026-93825

spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()

N/A

Published: September 24, 2026 at 04:03 PM UTC

Updated: October 3, 2026 at 11:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Prevent NULL pointer dereference when spi_get_device_id() returns NULL, which can happen when using driver_override without matching SPI ID entry.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.15.146 ≤ v < 5.15.2226.1.71 ≤ v < 6.1.1896.2 ≤ v < 6.12.1116.2 ≤ v < 6.18.536.2 ≤ v < 6.6.1586.2 ≤ v < 7.227eaeaf3294607104e90e84cec3f55e792cab225.15.146 6.1.71 6.2aea672d054a21782ed8450c75febb6ba3c208ca4bd1be85dbbbd4076e8dbdceefc3c4d2c673e0075

Vendor states this is fixed in 1fa4484116d14a0356edfeb6ecc7ea3b370911b1 (fixed)

Vendor states this is fixed in 359b3442e66c595ed03e5a6b0493b66600c63941 (fixed)

Vendor states this is fixed in 3fcd9415144f4fbd21e1bef35a7f8dbd734f607d (fixed)

Vendor states this is fixed in 72cc9c6d6fba5b4e0aaf89126884a56bb54b92f8 (fixed)

Vendor states this is fixed in aa966ccea3584a70c9a6030f4a16577030db35e5 (fixed)

Vendor states this is fixed in f1b061b4d4c6cbf861319ba954caa80145cf018f (fixed)

Vendor states this is fixed in 5.15.222 (unaffected)

Vendor states this is fixed in 6.1.189 (unaffected)

Vendor states this is fixed in 6.12.111 (unaffected)

Vendor states this is fixed in 6.18.53 (unaffected)

Vendor states this is fixed in 6.2 (unaffected)

Vendor states this is fixed in 6.6.158 (unaffected)