Executive brief
A vulnerability was identified in the Linux kernel's SPI driver for WPCM-FIU components, which are used for interfacing with flash memory. A flaw in how the system initializes this hardware could lead to a system crash (NULL pointer dereference) if certain expected memory resources are missing. This primarily impacts system stability and availability, potentially allowing a local user to cause a denial-of-service condition.
Technical details
A potential NULL pointer dereference exists in the wpcm_fiu_probe() function within drivers/spi/spi-wpcm-fiu.c. The vulnerability occurs because the return value of platform_get_resource_byname() is passed directly to resource_size() without a prior NULL check. If the 'memory' resource is missing, platform_get_resource_byname() returns NULL, leading to a kernel oops when resource_size() attempts to access the pointer. The fix involves reordering the code to ensure the resource pointer is validated via devm_ioremap_resource() before it is used in size calculations. This is a local vulnerability that can be triggered during driver initialization or device discovery.
Affected products
- Linux Linux Kernel Fixed in various stable branches including 2.6.x and 6.x series
Timeline
- 2026-02-12: other: Patch authored by Felix Gu
- 2026-06-03: advisory: CVE published in NVD dataset
References
- https://git.kernel.org/stable/c/0f93a80eb3fd596ddc5730d05e0e8c88e1aa2891
- https://git.kernel.org/stable/c/2c538a0b3472e99c892c26f4940da38b7d87f632
- https://git.kernel.org/stable/c/888a0a802c467bbe34a42167bdf9d7331333440a
- https://git.kernel.org/stable/c/9e5cb7e67fbdb8320d68d87db882a92b36f6a1d9
- https://git.kernel.org/stable/c/cb9b2dc34a9eef0855edb00ae9c9b7f72394281b