What’s Vulnerable › Vulnerabilities

CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-24 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: spi: spi-dw-dma: fix print error log when wait finish transaction If an error occurs, the device may not have a current message. In this case, the system will crash. In this case, it's better to use dev from the struct ctlr (struct spi_controller*).

Affected products

• Linux kernel: from 5.8.1 before 6.19.11; 7.0-rc1, 7.0-rc2, 7.0-rc3, 7.0-rc4, 7.0-rc5, 7.0-rc6 (+1); 5.8 — fixed in 6.19.11
• Linux: 5.8 — fixed in 7.0

How to fix

Upgrade to a fixed version: Linux kernel 6.19.11; Linux 7.0. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/184f5aaf72f1f1c73e66bae0b8d28e81c2f2a72f
• https://git.kernel.org/stable/c/3709357c1a7b7a422b0cbc2748f187acf612cd94
• https://git.kernel.org/stable/c/3b46d61890632c8f8b117147b6923bff4b42ccb7
• https://git.kernel.org/stable/c/aae4a47073b12c23eb1d2c5401bda442fbe27bd1
• https://git.kernel.org/stable/c/b8188ff3cfaa5621212b08473488cdbe41f86531
• https://git.kernel.org/stable/c/bac13309339b6f1ac02e6e53ebc75cf61483c396

Get alerted when CVE-2026-31560 or the next vulnerability affects your stack