CVE Catalog

CVE-2026-23207

Medium
Published: Translated: NVD NIST

Summary

A vulnerability in the Linux kernel related to interrupt handling in the SPI driver for tegra210-quad has been resolved. The issue was the lack of protection for the NULL check of curr_xfer in the tegra_qspi_isr_thread() function.

Risk Assessment

The lack of proper protection could lead to unpredictable system behavior, posing a risk of crashes or unauthorized memory access.

Recommendation

It is recommended to update the Linux kernel to the latest version to ensure that all checks are properly protected by the spinlock.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Protect curr_xfer check in IRQ handler Now that all other accesses to curr_xfer are done under the lock, protect the curr_xfer NULL check in tegra_qspi_isr_thread() with the spinlock. Without this protection, t

Vulnerability data from NVD (NIST) · CISA KEV · EPSS