CVE-2026-93825
Received Received - Intake

NULL Pointer Dereference in Linux Kernel SPI Subsystem

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Prevent NULL pointer dereference when spi_get_device_id() returns NULL, which can happen when using driver_override without matching SPI ID entry.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93825
EUVD
EUVD-2026-86214

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where a NULL pointer dereference can occur in the spi_get_device_match_data function. It happens when spi_get_device_id returns NULL, which may occur if driver_override is used without a matching SPI ID entry.

Detection Guidance

This vulnerability involves a NULL pointer dereference in the Linux kernel's SPI subsystem. Detection requires checking for crashes or kernel oops related to SPI driver operations, particularly when driver_override is used without a matching SPI ID entry. Monitor kernel logs for NULL pointer dereference errors in spi-related functions.

Impact Analysis

This vulnerability could cause system crashes or instability by triggering a NULL pointer dereference in the Linux kernel. It may lead to denial of service conditions if exploited.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. Avoid using driver_override for SPI devices unless absolutely necessary. If driver_override is required, ensure proper SPI ID entries are configured to prevent NULL returns from spi_get_device_id().

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93825. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart