CVE-2026-80752

Input: psxpad-spi - set driver data before use

State: Published
Severity: 8.4 High
Published: Sep 3, 2026
Updated: Sep 4, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: psxpad-spi - set driver data before use

psxpad_spi_suspend() retrieves the controller state with spi_get_drvdata(), but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before e980066e434a9c74ff1665ed9140427e95b0ee7cAffected 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 1bba6bd6861b1e0c8ecf20cd1892f0d3877c02a2Affected 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 86531cdfb3a03213e2569deed5195412a4e3f7eeAffected 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before da6b8b05db0cf43e0cc198431fa8ee9739b3b817Affected 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 1edcb7ffee7ac4dc35cbe5bbd0e27bac3614ebe4Affected 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 8d622c58205adbc8af19864e277386528b671345Affected 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 62e25677d1440085381b047ec4984be9b6793759Affected 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 732f38c36059e68ba3b4b89c56911d777fd3185cAffected
LinuxLinux	4.12Affected before 4.12Not affected 5.10.266 through 5.10.Not affected 5.15.217 through 5.15.Not affected 6.1.184 through 6.1.Not affected 6.6.153 through 6.6.Not affected 6.12.105 through 6.12.Not affected 6.18.46 through 6.18.Not affected 7.1.10 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before e980066e434a9c74ff1665ed9140427e95b0ee7cAffected
8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 1bba6bd6861b1e0c8ecf20cd1892f0d3877c02a2Affected
8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 86531cdfb3a03213e2569deed5195412a4e3f7eeAffected
8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before da6b8b05db0cf43e0cc198431fa8ee9739b3b817Affected
8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 1edcb7ffee7ac4dc35cbe5bbd0e27bac3614ebe4Affected
8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 8d622c58205adbc8af19864e277386528b671345Affected
8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 62e25677d1440085381b047ec4984be9b6793759Affected
8be193c7b1f44d3f4dcb27107df0831709c2deb1 to before 732f38c36059e68ba3b4b89c56911d777fd3185cAffected

LinuxLinux

4.12Affected
before 4.12Not affected
5.10.266 through 5.10.*Not affected
5.15.217 through 5.15.*Not affected
6.1.184 through 6.1.*Not affected
6.6.153 through 6.6.*Not affected
6.12.105 through 6.12.*Not affected
6.18.46 through 6.18.*Not affected
7.1.10 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.