CVE-2026-23202: spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
In the Linux kernel, the following vulnerability has been resolved:
spi: tegra210-quad: Protect currxfer in tegraqspicombinedseqxfer
The currxfer field is read by the IRQ handler without holding the lock to check if a transfer is in progress. When clearing currxfer in the combined sequence transfer loop, protect it with the spinlock to prevent a race with the interrupt handler.
Protect the currxfer clearing at the exit path of tegraqspicombinedseqxfer() with the spinlock to prevent a race with the interrupt handler that reads this field.
Without this protection, the IRQ handler could read a partially updated currxfer value, leading to NULL pointer dereference or use-after-free.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23202?
CVE-2026-23202 has been rated as medium severity due to potential data corruption risks in the Linux kernel.
How do I fix CVE-2026-23202?
To fix CVE-2026-23202, ensure you update your Linux kernel to the patched version that resolves this vulnerability.
Which software is affected by CVE-2026-23202?
CVE-2026-23202 affects the Linux kernel, particularly the tegra210-quad spi driver.
What impact does CVE-2026-23202 have on systems?
CVE-2026-23202 can lead to data integrity issues due to improper locking of the curr_xfer field during IRQ handling.
Is there a workaround for CVE-2026-23202?
While a direct workaround is not specified, upgrading to a secure kernel version is the most effective mitigation for CVE-2026-23202.