CVE Database›Document archive›CVE-2026-53344

CVE-2026-53344

kernel: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 1, 2026

Updated · July 2, 2026

Description

A flaw was found in the Linux kernel's pinctrl: mcp23s08 driver. During the initialization of the regmap (register map) for the mcp23s08 component, an attempt to perform an SPI (Serial Peripheral Interface) read occurs before critical device parameters (mcp->dev and mcp->addr) are properly set. This premature access leads to a NULL pointer dereference, which can cause a system crash and result in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference