CVE-2026-93814 - Vulnerability Details

- spi: core: Abort active target transfer on controller suspend

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: core: Abort active target transfer on controller suspend

When an SPI controller operating in target mode has a transfer in
progress at the time of system suspend, the suspend path proceeds
without aborting the ongoing transfer. This can leave the hardware in
an inconsistent state, potentially causing the system to hang or fail
to resume cleanly.

Fix this by invoking the controller's target_abort callback from
spi_controller_suspend() when the controller is in target mode and the
callback is registered. This ensures any active target transfer is
cleanly terminated before the controller is suspended.

Published: 2026-09-24

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The Linux kernel SPI core bug causes an active target‑mode transfer to continue through a system suspend without being aborted. The hardware can become left in an inconsistent state, leading to a system hang or failure to resume cleanly. This weakness is classified as CWE‑459 (Use After Free).

Affected Systems

All Linux kernel builds that use the SPI core in target mode before the reported patch are affected. This includes any distribution kernel that has never incorporated the controller's target_abort call in spi_controller_suspend().

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of < 1% shows a low likelihood of exploitation in the wild. The vulnerability does not appear in the CISA KEV catalog. An attacker or even an accidental system suspend occurring during an active SPI target transfer could trigger a denial‑of‑service by freezing the host or preventing resume.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`6c364062bfed3c34490e85bea52ff6e2d4f0f281`	affected	< a75d9eb78c89d3fa8d503966c91a51f02eced768
`6c364062bfed3c34490e85bea52ff6e2d4f0f281`	affected	< 1cc84ca8599b8fa64014821bca453ebb3326c71e
`6c364062bfed3c34490e85bea52ff6e2d4f0f281`	affected	< b81ac605763c319ca9928a237818ab4e8ab7bb59
`6c364062bfed3c34490e85bea52ff6e2d4f0f281`	affected	< f6a0cafa265c8a4aed585d873747e3b88b146eed
`6c364062bfed3c34490e85bea52ff6e2d4f0f281`	affected	< c1bab046d4786c5b17aab7c5225bf0d4a2a2d19b

Linux

affected

Version	Status	Constraints
`4.13`	affected	—
`0`	unaffected	< 4.13
`6.1.189`	unaffected	≤ 6.1.*
`6.6.158`	unaffected	≤ 6.6.*
`6.12.111`	unaffected	≤ 6.12.*
`6.18.53`	unaffected	≤ 6.18.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,b81ac605763c319ca9928a237818ab4e8ab7bb59)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,f6a0cafa265c8a4aed585d873747e3b88b146eed)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,c1bab046d4786c5b17aab7c5225bf0d4a2a2d19b)`	affected	code_commit	—
`[0,6.12.111)`	affected	semver	—
`[0,6.18.53)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[6.12.111,6.13.0)`	unaffected	semver	—
`[6.18.53,6.19.0)`	unaffected	semver	—
`[7.2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the kernel patch that adds a call to target_abort in spi_controller_suspend()
Upgrade to a Linux kernel version that incorporates the documented fix
Before suspending the system, ensure that no active SPI target transfers are in progress or temporarily disable SPI target mode as a workaround

Generated by OpenCVE AI on October 1, 2026 at 21:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
Debian DLA	DLA-4817-1	linux-6.12 security update
Debian DLA	DLA-4841-1	linux security update
Debian DSA	DSA-6528-1	linux security update

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00168.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93814.mbox
https://git.kernel.org/stable/c/1cc84ca8599b8fa64014821bca453ebb3326c71e
https://git.kernel.org/stable/c/a75d9eb78c89d3fa8d503966c91a51f02eced768
https://git.kernel.org/stable/c/b81ac605763c319ca9928a237818ab4e8ab7bb59
https://git.kernel.org/stable/c/c1bab046d4786c5b17aab7c5225bf0d4a2a2d19b
https://git.kernel.org/stable/c/f6a0cafa265c8a4aed585d873747e3b88b146eed
https://nvd.nist.gov/vuln/detail/CVE-2026-93814
https://www.cve.org/CVERecord?id=CVE-2026-93814

History

Sat, 03 Oct 2026 11:15:00 +0000

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/1cc84ca8599b8fa64014821bca453ebb3326c71e https://git.kernel.org/stable/c/a75d9eb78c89d3fa8d503966c91a51f02eced768

Thu, 01 Oct 2026 17:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-362 CWE-404

Tue, 29 Sep 2026 13:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-459
References		https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93814.mbox https://nvd.nist.gov/vuln/detail/CVE-2026-93814 https://www.cve.org/CVERecord?id=CVE-2026-93814
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Fri, 25 Sep 2026 03:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-362 CWE-404

Thu, 24 Sep 2026 16:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing transfer. This can leave the hardware in an inconsistent state, potentially causing the system to hang or fail to resume cleanly. Fix this by invoking the controller's target_abort callback from spi_controller_suspend() when the controller is in target mode and the callback is registered. This ensures any active target transfer is cleanly terminated before the controller is suspended.
Title		spi: core: Abort active target transfer on controller suspend
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/b81ac605763c319ca9928a237818ab4e8ab7bb59 https://git.kernel.org/stable/c/c1bab046d4786c5b17aab7c5225bf0d4a2a2d19b https://git.kernel.org/stable/c/f6a0cafa265c8a4aed585d873747e3b88b146eed

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-24T16:02:50.963Z

Updated: 2026-10-03T10:57:46.916Z

Reserved: 2026-09-18T17:59:28.790Z

Link: CVE-2026-93814

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-24T17:17:14.897

Modified: 2026-10-03T11:17:51.293

Link: CVE-2026-93814

Redhat

Severity : Low

Publid Date: 2026-09-24T00:00:00Z

Links: CVE-2026-93814 - Bugzilla

OpenCVE Enrichment

Updated: 2026-10-01T21:15:09Z

Weaknesses

CWE-459
Incomplete Cleanup

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object