Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-46192

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/05/2026
Última modificación:
28/05/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> spi: microchip-core-qspi: don&amp;#39;t attempt to transmit during emulated read-only dual/quad operations<br /> <br /> The core will deal with reads by creating clock cycles itself, there&amp;#39;s<br /> no need to generate clock cycles by transmitting garbage data at the<br /> driver level. Further, transmitting garbage data just bricks the transfer<br /> since QSPI doesn&amp;#39;t have a dedicated master-out line like MOSI in regular<br /> SPI. I&amp;#39;m not entirely sure if the transfer is bricked because of the<br /> garbage data being transmitted on the bus or because the core loses<br /> track of whether it is supposed to be sending or receiving data.

Impacto