CVE-2026-80752: Input: psxpad-spi - set driver data before use
In the Linux kernel, the following vulnerability has been resolved:
Input: psxpad-spi - set driver data before use
psxpadspisuspend() retrieves the controller state with spigetdrvdata(), but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe.
Affected Software
Event History
Frequently Asked Questions
When can this issue be triggered?
It can be triggered when the psxpad-spi driver is suspended. The suspend callback retrieves driver data that probe did not store, resulting in a NULL-pointer dereference.
What systems are exposed?
Systems using the Linux kernel with the psxpad-spi input driver present and exercised during suspend are exposed to the described failure. The provided information does not identify affected kernel versions or whether the driver is enabled by default.
How can I determine whether the fix is present?
Check whether the psxpad-spi probe path stores its controller state as SPI driver data before the suspend callback calls spi_get_drvdata(). The referenced stable kernel commits contain the fix.