CVE-2026-46192

kernel: spi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's spi: microchip-core-qspi driver. This vulnerability allows the driver to transmit data during emulated read-only dual or quad operations, which are specific modes for communicating with Quad Serial Peripheral Interface (QSPI) devices. This unintended data transmission can disrupt the QSPI communication, leading to a denial of service (DoS) where the transfer becomes inoperable.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-372 · Incomplete Internal State Distinction