CVE-2026-46192

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
28/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> spi: microchip-core-qspi: don&amp;#39;t attempt to transmit during emulated read-only dual/quad operations<br /> <br /> The core will deal with reads by creating clock cycles itself, there&amp;#39;s<br /> no need to generate clock cycles by transmitting garbage data at the<br /> driver level. Further, transmitting garbage data just bricks the transfer<br /> since QSPI doesn&amp;#39;t have a dedicated master-out line like MOSI in regular<br /> SPI. I&amp;#39;m not entirely sure if the transfer is bricked because of the<br /> garbage data being transmitted on the bus or because the core loses<br /> track of whether it is supposed to be sending or receiving data.

Impact