CVE-2026-46203
Analyzed Analyzed - Analysis Complete
SPI Controller Unclocked Access in Linux Kernel

Publication date: 2026-05-28

Last updated on: 2026-06-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: fix unclocked access on unbind Make sure that the controller is runtime resumed before disabling it during driver unbind to avoid an unclocked register access. This issue was flagged by Sashiko when reviewing a controller deregistration fix.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-28
Last Modified
2026-06-10
Generated
2026-06-17
AI Q&A
2026-05-28
EPSS Evaluated
2026-06-16
NVD
CVE-2026-46203
EUVD
EUVD-2026-32830
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel 7.1
linux linux_kernel From 6.7 (inc) to 7.0.9 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Mitigation Strategies

The vulnerability involves unclocked register access during driver unbind in the cadence-quadspi controller in the Linux kernel.

To mitigate this issue, ensure that the controller is runtime resumed before disabling it during driver unbind.

Applying the relevant Linux kernel update or patch that fixes this issue is recommended.

Executive Summary

This vulnerability exists in the Linux kernel's cadence-quadspi driver. It involves an unclocked register access that occurs during the driver unbind process. Specifically, the controller must be runtime resumed before it is disabled during unbind to prevent accessing registers without a clock signal.

Impact Analysis

If the controller is accessed without being properly clocked, it could lead to undefined behavior or system instability. This might cause crashes or malfunctions in systems relying on the cadence-quadspi controller, potentially affecting device reliability.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-46203. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart