Skip to main content

Linux Kernel CVE-2026-46261

| EUVDEUVD-2026-34123 MEDIUM
NULL Pointer Dereference (CWE-476)
2026-06-03 Linux GHSA-86fj-8698-3qp6
Denial Of Service Null Pointer Dereference Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jun 09, 2026 - 20:21 vuln.today
CVSS changed
Jun 09, 2026 - 20:07 NVD
5.5 (MEDIUM)
Patch available
Jun 03, 2026 - 19:01 EUVD
CVE Published
Jun 03, 2026 - 15:49 nvd
MEDIUM 5.5
CVE Published
Jun 03, 2026 - 15:49 nvd
UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()

platform_get_resource_byname() can return NULL, which would cause a crash when passed the pointer to resource_size().

Move the fiu->memory_size assignment after the error check for devm_ioremap_resource() to prevent the potential NULL pointer dereference.

AnalysisAI

NULL pointer dereference in the Linux kernel's SPI WPCM FIU driver allows a local low-privileged attacker to crash the kernel via a denial-of-service condition. The wpcm_fiu_probe() function passes the return value of platform_get_resource_byname() directly to resource_size() without validating against NULL, meaning if the named resource is absent the kernel dereferences a NULL pointer and panics. No public exploit exists and no active exploitation is confirmed; EPSS of 0.02% (5th percentile) reflects the narrow, hardware-specific attack surface.

Technical ContextAI

The vulnerability resides in drivers/spi/spi-wpcm-fiu.c within the Linux kernel, affecting the Nuvoton WPCM FIU (Flash Interface Unit) SPI controller driver. The root cause is CWE-476 (NULL Pointer Dereference): platform_get_resource_byname() is a kernel API that returns NULL when the requested named I/O memory resource is not found in the platform device's resource table. The driver assigned fiu->memory_size = resource_size(res) before confirming that devm_ioremap_resource() succeeded and that res was non-NULL, meaning a malformed or absent ACPI/DT resource description causes resource_size() to operate on a NULL pointer, triggering a kernel oops. The fix relocates the fiu->memory_size assignment to after the NULL/error check. CPE data identifies the affected component as cpe:2.3:a:linux:linux. The vulnerability was introduced at commit 9838c182471ee5532824bae7f2669d3539719f78.

RemediationAI

The primary fix is to upgrade to patched Linux kernel stable releases: 6.6.128, 6.12.75, 6.18.14, 6.19.4, or 7.0. Upstream fix commits are available at https://git.kernel.org/stable/c/9e5cb7e67fbdb8320d68d87db882a92b36f6a1d9 (and sibling commits 2c538a0b, 0f93a80e, cb9b2dc3, 888a0a80) for cherry-picking into custom kernel builds. If a kernel upgrade is not immediately feasible, a targeted workaround is to blacklist or prevent loading of the spi-wpcm-fiu kernel module on systems that do not use Nuvoton WPCM FIU hardware ('echo blacklist spi-wpcm-fiu >> /etc/modprobe.d/blacklist.conf'), which prevents the vulnerable probe path from executing entirely with no functional side effects on non-WPCM platforms. On systems that do require the driver, restrict physical and local user access to the affected hardware nodes as a partial compensating control.

Same weakness CWE-476 – NULL Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Not-Affected

Share

CVE-2026-46261 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy