What is the CVSS score of EUVD-2026-70356?

EUVD-2026-70356 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-70356?

Linux kernel versions 5.10 through 7.2 contain a stability defect that crashes systems when they enter sleep mode, affecting only specialized hardware with connected gaming controllers.. A patch is available.

How to fix or mitigate EUVD-2026-70356?

Within 24 hours, audit your infrastructure inventory to determine if you operate any Linux systems with SPI-connected PlayStation controller hardware; most organizations will find none. Within 7 days, for any identified affected systems, apply the vendor-released kernel patch available across all active stable branches (5.10, 5.15, 6.1, 6.6, and 7.2 series). Within 30 days, complete patch deployment across all affected systems using your standard kernel update procedures.

Linux Kernel EUVD-2026-70356

| CVE-2026-80752 HIGH

2026-09-03 Linux

GHSA-8qwq-c5q8-xcxf

Denial Of Service Linux Suse

8.4

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

5.5 MEDIUM

Local driver suspend bug requires hardware attachment and suspend trigger; NULL deref causes kernel crash (A:H only) with no confidentiality or integrity impact; low privilege sufficient to initiate suspend on desktop systems.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 04, 2026 - 05:33 vuln.today

CVSS changed

Sep 04, 2026 - 05:22 NVD

8.4 (HIGH)

Patch available

Sep 03, 2026 - 10:16 EUVD

CVE Published

Sep 03, 2026 - 08:26 cve.org

UNKNOWN (no severity yet)

CVE Published

Sep 03, 2026 - 08:26 cve.org

HIGH 8.4

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

Input: psxpad-spi - set driver data before use

psxpad_spi_suspend() retrieves the controller state with spi_get_drvdata(), but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe.

AnalysisAI

NULL pointer dereference in the Linux kernel's psxpad-spi driver crashes the kernel when system suspend is triggered on hardware using SPI-connected PlayStation controllers. The probe() function in drivers/input/joystick/psxpad-spi.c omits the spi_set_drvdata() call that stores per-device state, so psxpad_spi_suspend() unconditionally dereferences a NULL pointer on suspend entry, causing a kernel panic. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Two specific conditions must both be present: (1) the psxpad-spi kernel module must be loaded, which in practice requires SPI-connected PlayStation controller hardware to be physically attached (or the module manually forced), and (2) the system must enter suspend state (suspend-to-RAM or suspend-to-disk) while that driver is active. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The provided CVSS score of 8.4 with C:H/I:H/A:H is substantially overstated for what is a kernel DoS via NULL pointer dereference in a niche peripheral driver. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade to a patched kernel release: 7.2, 7.1.10, 6.18.46, 6.12.105, 6.6.153, 6.1.184, 5.15.217, or 5.10.266 depending on the branch in use. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, audit your infrastructure inventory to determine if you operate any Linux systems with SPI-connected PlayStation controller hardware; most organizations will find none. …

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

EUVD-2026-70356 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-70356

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

Recommended ActionAI

Same technique Denial Of Service

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code