CVE-2026-46261spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe()
- 5.5MediumCVSS base score
- 0.11%Exploitation in 30 daysEPSS · top 99% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcm_fiu_probe() platform_get_resource_byname() can return NULL, which would cause a crash when passed the pointer to resource_size(). Move the fiu->memory_size assignment after the error check for devm_ioremap_resource() to prevent the potential NULL pointer dereference.
Timeline
ID reserved
By Linux
- 21 days later
· 21 days later
Published
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Analyzed | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.11% · top 99% of all CVEs (12 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 9838c182471ee5532824bae7f2669d3539719f78 – < 9e5cb7e67fbdb8320d68d87db882a92b36f6a1d9
- affected 9838c182471ee5532824bae7f2669d3539719f78 – < 2c538a0b3472e99c892c26f4940da38b7d87f632
- affected 9838c182471ee5532824bae7f2669d3539719f78 – < 0f93a80eb3fd596ddc5730d05e0e8c88e1aa2891
- affected 9838c182471ee5532824bae7f2669d3539719f78 – < cb9b2dc34a9eef0855edb00ae9c9b7f72394281b
- affected 9838c182471ee5532824bae7f2669d3539719f78 – < 888a0a802c467bbe34a42167bdf9d7331333440a
- affected 6.2
- unaffected < 6.2
- unaffected 6.6.128 – ≤ 6.6.*
- unaffected 6.12.75 – ≤ 6.12.*
- unaffected 6.18.14 – ≤ 6.18.*
- unaffected 6.19.4 – ≤ 6.19.*
- unaffected 7.0 – ≤ *
References
References5
- https://git.kernel.org/stable/c/9e5cb7e67fbdb8320d68d87db882a92b36f6a1d9 (opens in a new tab)
- https://git.kernel.org/stable/c/2c538a0b3472e99c892c26f4940da38b7d87f632 (opens in a new tab)
- https://git.kernel.org/stable/c/0f93a80eb3fd596ddc5730d05e0e8c88e1aa2891 (opens in a new tab)
- https://git.kernel.org/stable/c/cb9b2dc34a9eef0855edb00ae9c9b7f72394281b (opens in a new tab)
- https://git.kernel.org/stable/c/888a0a802c467bbe34a42167bdf9d7331333440a (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-34123 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-46261)Record last updated .