BaseFortify

Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's psxpad-spi driver. The issue occurs in the psxpad_spi_suspend() function which calls spi_get_drvdata() to retrieve controller state. However, the driver's probe function never stores this data, causing suspend to dereference a NULL pointer and potentially crash the system.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to the Linux kernel's psxpad-spi driver and may not have direct network detection methods. Check if the psxpad-spi driver is loaded using 'lsmod | grep psxpad_spi'. If present, verify kernel logs for NULL pointer dereference errors during suspend operations.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could cause system crashes or instability when the affected psxpad-spi driver is used and the system attempts to suspend. It may lead to denial of service conditions for systems relying on this driver for input devices.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a local denial-of-service issue in the Linux kernel's psxpad-spi driver. Compliance impacts would only occur if exploitation led to system unavailability or data loss, which is not indicated here.

Useful 0 Not Useful 0

Mitigation Strategies

Update your Linux kernel to the latest patched version that includes the fix for CVE-2026-80752. If using a custom kernel, ensure the psxpad-spi driver stores controller state during probe. Avoid suspending systems using this driver until patched.

Useful 0 Not Useful 0