CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction
In the Linux kernel, the following vulnerability has been resolved:
Other sources
spi: spi-dw-dma: fix print error log when wait finish transaction
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 7.2.6-1Fixed in 7.2.7-1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using the Linux kernel's SPI DesignWare DMA driver (spi-dw-dma) are the affected population. The issue is triggered in an error path while waiting for an SPI transaction to finish.
What level of access does an attacker need?
The supplied CVSS vector indicates local access, low attack complexity, low privileges, and no user interaction. The impact is availability only, with a high availability impact and no stated confidentiality or integrity impact.
What happens when the vulnerable error path is reached?
If an error occurs when there is no current SPI message, the driver can attempt to use that missing message while printing an error log. This can cause the system to crash.
Is there a workaround if an update cannot be applied immediately?
No workaround is provided in the available data. The described fix changes error logging to use the device from the SPI controller structure rather than relying on a current message.