CVE-2026-72156

Received Received - Intake

Out-of-Bounds Read in Microchip FPGA SPI Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() mpf_ops_parse_header() reads header_size from the bitstream at MPF_HEADER_SIZE_OFFSET (24). When header_size is zero, the expression *(buf + header_size - 1) reads one byte before the buffer start. Since initial_header_size is set to 71 in mpf_ops, the fpga-mgr core guarantees the buffer is large enough to reach MPF_HEADER_SIZE_OFFSET. The only real gap is the zero header_size case, which cannot be resolved by providing a larger buffer, so return -EINVAL.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72156

EUVD

EUVD-2026-58914

Affected Vendors & Products

Vendor	Product	Version / Range
microchip	spi	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's FPGA driver for Microchip SPI devices. It involves an out-of-bounds (OOB) read in the mpf_ops_parse_header() function. When a bitstream has a zero header_size value, the function incorrectly reads one byte before the buffer start, causing a memory access error.

Detection Guidance

This vulnerability is specific to the Linux kernel's FPGA SPI driver (microchip-spi). Detection requires checking the kernel version and loaded modules. Use commands like 'uname -a' to verify kernel version and 'lsmod | grep microchip' to check if the vulnerable module is loaded.

Impact Analysis

This vulnerability could allow an attacker to cause a denial-of-service (DoS) condition by triggering an OOB read in the kernel. It may lead to system crashes or instability if exploited through a malicious FPGA bitstream.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level buffer overflow issue in the Linux kernel's FPGA driver. It does not involve data exposure, privacy violations, or unauthorized access that these regulations typically address.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-72156. If immediate update is not possible, consider unloading the microchip-spi module if FPGA functionality is not required.

Hi! I’m here to help you understand CVE-2026-72156. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70