CVE-2026-72133

A flaw was found in the Linux kernel's spi: uniphier driver. The driver attempts to use an internal synchronization mechanism before it has been properly set up. If an interrupt occurs at a precise moment, the system may try to operate on this uninitialized mechanism, leading to unpredictable system behavior. This could result in system instability or a denial of service.

This vulnerability is rated as Moderate severity because exploitation requires local access during device initialization and is limited to causing a denial of service without compromising confidentiality or integrity. The affected code resides in the UniPhier SPI controller driver, which is specific to Socionext UniPhier hardware platforms and is not enabled in supported Red Hat Enterprise Linux kernel builds. Consequently, standard Red Hat enterprise installations do not ship the vulnerable driver and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.