CVE-2026-97512
Received Received - Intake

spi-qcom-qspi Kernel Runtime PM Error Handling Flaw

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM The runtime PM functions had incomplete error handling that could leave the system in an inconsistent state. If any operation failed midway through suspend or resume, some resources would be left in the wrong state while others were already changed, leading to potential clock/power imbalances. Reorder the suspend/resume sequences to avoid brownout risk by ensuring the performance state is set appropriately before clocks are enabled and clocks are disabled before dropping the performance state. Fix by adding proper error checking for all operations and using goto-based cleanup to ensure all successfully acquired resources are properly released on any error.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97512
EUVD
EUVD-2026-86110

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's spi-qcom-qspi driver. It involves incomplete error handling in runtime power management (PM) functions. When suspend or resume operations fail midway, the system may end up in an inconsistent state with mismatched clock or power settings.

Detection Guidance

This vulnerability is specific to the Linux kernel's spi-qcom-qspi driver and may not have direct network detection methods. Check kernel logs for errors related to spi-qcom-qspi or runtime PM failures using: dmesg | grep spi-qcom-qspi or journalctl -k | grep spi-qcom-qspi. Monitor system stability during suspend/resume cycles for crashes or hangs.

Impact Analysis

If exploited, this could lead to system instability such as unexpected shutdowns, crashes, or hardware malfunctions due to improper power or clock management. It may also cause data corruption or reduced performance.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for spi-qcom-qspi runtime PM error handling. If immediate update is not possible, avoid triggering suspend/resume cycles on affected systems until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97512. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart