CVE-2026-80752Input: psxpad-spi - set driver data before use
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad_spi_suspend() retrieves the controller state with spi_get_drvdata(), but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe.
- CVSS
- 8.4 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 4, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 8be193c7b1f44d3f4dcb27107df0831709c2deb1 before e980066e434a9c74ff1665ed9140427e95b0ee7c; 8be193c7b1f44d3f4dcb27107df0831709c2deb1 builds before 1bba6bd6861b1e0c8ecf20cd1892f0d3877c02a2; from 8be193c7b1f44d3f4dcb27107df0831709c2deb1 before 86531cdfb3a03213e2569deed5195412a4e3f7ee; from 8be193c7b1f44d3f4dcb27107df0831709c2deb1 before da6b8b05db0cf43e0cc198431fa8ee9739b3b817; 8be193c7b1f44d3f4dcb27107df0831709c2deb1 builds before 1edcb7ffee7ac4dc35cbe5bbd0e27bac3614ebe4; from 8be193c7b1f44d3f4dcb27107df0831709c2deb1 before 8d622c58205adbc8af19864e277386528b671345; from 8be193c7b1f44d3f4dcb27107df0831709c2deb1 before 62e25677d1440085381b047ec4984be9b6793759; from 8be193c7b1f44d3f4dcb27107df0831709c2deb1 before 732f38c36059e68ba3b4b89c56911d777fd3185c | CNA record |
References
- https://git.kernel.org/stable/c/e980066e434a9c74ff1665ed9140427e95b0ee7c
- https://git.kernel.org/stable/c/1bba6bd6861b1e0c8ecf20cd1892f0d3877c02a2
- https://git.kernel.org/stable/c/86531cdfb3a03213e2569deed5195412a4e3f7ee
- https://git.kernel.org/stable/c/da6b8b05db0cf43e0cc198431fa8ee9739b3b817
- https://git.kernel.org/stable/c/1edcb7ffee7ac4dc35cbe5bbd0e27bac3614ebe4
- https://git.kernel.org/stable/c/8d622c58205adbc8af19864e277386528b671345
- https://git.kernel.org/stable/c/62e25677d1440085381b047ec4984be9b6793759
- https://git.kernel.org/stable/c/732f38c36059e68ba3b4b89c56911d777fd3185c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.