In the Linux kernel, the following vulnerability has been resolved:
spi: cs42l43: Property entry should be a null-terminated array
The software node does not specify a count of property entries, so the array must be null-terminated.
When unterminated, this can lead to a fault in the downstream cs35l56 amplifier driver, because the node parse walks off the end of the array into unknown memory.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade kernel-source | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oem-6.14Upgrade linux-image-genericUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-raspi-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-awsUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-azure | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub