CVE-2026-53344
kernel: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 1, 2026
Updated · July 2, 2026
Description
A flaw was found in the Linux kernel's pinctrl: mcp23s08 driver. During the initialization of the regmap (register map) for the mcp23s08 component, an attempt to perform an SPI (Serial Peripheral Interface) read occurs before critical device parameters (mcp->dev and mcp->addr) are properly set. This premature access leads to a NULL pointer dereference, which can cause a system crash and result in a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference