Skip to main content

Linux Kernel EUVDEUVD-2026-25453

| CVE-2026-31560 MEDIUM
2026-04-24 Linux GHSA-x9pc-8g9f-68mf
Denial Of Service Linux
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local access and low-privilege required to trigger SPI DMA error path; crash causes full availability loss with zero confidentiality or integrity impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Analysis Generated
Jul 24, 2026 - 03:12 vuln.today
CVSS changed
Apr 27, 2026 - 20:37 NVD
5.5 (MEDIUM)
Patch released
Apr 27, 2026 - 20:30 nvd
Patch available
Patch available
Apr 24, 2026 - 16:16 EUVD
EUVD ID Assigned
Apr 24, 2026 - 15:00 euvd
EUVD-2026-25453
CVE Published
Apr 24, 2026 - 14:35 nvd
MEDIUM 5.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

spi: spi-dw-dma: fix print error log when wait finish transaction

If an error occurs, the device may not have a current message. In this case, the system will crash.

In this case, it's better to use dev from the struct ctlr (struct spi_controller*).

AnalysisAI

Null pointer dereference in the Linux kernel's spi-dw-dma driver crashes the system when an error occurs during a DMA transaction and the current SPI message pointer is NULL at the time error-log printing is attempted. Systems running the DesignWare SPI DMA driver are exposed to a local denial-of-service condition triggerable by a low-privileged user. No public exploit exists and EPSS probability is 0.02% (5th percentile), indicating negligible current exploitation interest; however, the crash path is deterministic once the error condition is induced.

Technical ContextAI

The affected subsystem is the DesignWare SPI DMA driver (spi/spi-dw-dma) within the Linux kernel. When a transaction error occurs during the 'wait finish transaction' path, the driver attempts to emit a diagnostic message using the device pointer derived from the active SPI message (struct spi_message). Under error conditions the current message field may be NULL, resulting in a null pointer dereference and subsequent kernel panic. The root cause maps to CWE-476 (NULL Pointer Dereference), though the CWE field is formally unassigned in NVD. The upstream fix substitutes the device pointer source, using dev from the parent struct spi_controller (ctlr) instead of deriving it through the potentially-NULL current message. Affected CPE is cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*, covering the Linux kernel broadly; however, only systems with DesignWare SPI IP blocks and the spi-dw-dma module active are in practice exploitable.

RemediationAI

Upgrade the Linux kernel to version 6.19.11 or later on the 6.x stable series, or to 7.0 or later on the mainline series. The authoritative fix commits are available at https://git.kernel.org/stable/c/184f5aaf72f1f1c73e66bae0b8d28e81c2f2a72f (6.x branch) and https://git.kernel.org/stable/c/3b46d61890632c8f8b117147b6923bff4b42ccb7 (7.x branch). For systems where immediate kernel upgrade is not feasible, the spi-dw-dma module can be unloaded using 'modprobe -r spi-dw-dma' and blacklisted in /etc/modprobe.d/ to prevent reload on boot - note this will disable all SPI DMA functionality for peripherals relying on DesignWare SPI, which may break dependent device operation. Restricting local shell access to the minimum required user set reduces the population of users who could trigger the error path. Distribution-specific kernel updates from vendors such as Red Hat, SUSE, Debian, and Ubuntu should be monitored and applied via standard package management once released.

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

EUVD-2026-25453 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy