CVE-2026-23202

A race condition was found in the Tegra210 Quad SPI driver. The curr_xfer field is cleared without holding the spinlock, allowing the IRQ handler to read a partially updated or stale value, potentially leading to NULL pointer dereference or use-after-free.

This affects NVIDIA Tegra210-based systems using the Quad SPI controller. The race requires specific timing between SPI transfer completion and interrupt handling, making exploitation difficult but potentially causing system crashes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.