CVE-2026-93814
Received Received - Intake

SPI Controller Suspend Fails to Abort Active Target Transfer

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing transfer. This can leave the hardware in an inconsistent state, potentially causing the system to hang or fail to resume cleanly. Fix this by invoking the controller's target_abort callback from spi_controller_suspend() when the controller is in target mode and the callback is registered. This ensures any active target transfer is cleanly terminated before the controller is suspended.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93814
EUVD
EUVD-2026-86202

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's SPI (Serial Peripheral Interface) subsystem. When an SPI controller in target mode has an active transfer during system suspend, the suspend process does not abort the transfer. This can leave the hardware in an inconsistent state, potentially causing the system to hang or fail to resume properly.

Detection Guidance

This vulnerability affects the Linux kernel's SPI controller in target mode. Detection involves checking if your system uses SPI controllers in target mode and if transfers are not properly aborted during suspend. Check kernel logs for suspend/resume errors or hardware hangs related to SPI devices. No specific commands are provided in the context.

Impact Analysis

If you use a system with SPI controllers in target mode, this vulnerability could cause system hangs or failed resumes during suspend operations. This may lead to data loss, system instability, or require manual intervention to recover.

Mitigation Strategies

Apply the kernel patch that adds the target_abort callback invocation in spi_controller_suspend(). Ensure your Linux kernel is updated to a version containing this fix. Monitor SPI controller behavior during suspend/resume cycles to verify the fix.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93814. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart