In the Linux kernel, the following vulnerability has been resolved:
spi: cs42l43: Property entry should be a null-terminated array
The software node does not specify a count of property entries, so the array must be null-terminated.
When unterminated, this can lead to a fault in the downstream cs35l56 amplifier driver, because the node parse walks off the end of the array into unknown memory.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-awsUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-gcp-6.14 | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub