In the Linux kernel, the following vulnerability has been resolved:
spi: cs42l43: Property entry should be a null-terminated array
The software node does not specify a count of property entries, so the array must be null-terminated.
When unterminated, this can lead to a fault in the downstream cs35l56 amplifier driver, because the node parse walks off the end of the array into unknown memory.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade dtb-appleUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade dtb-amdUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-cavium | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1017-oracle | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub