CVE-2026-53344

pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init

published July 1, 2026

CVSS
—
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init

Regmap initialization triggers regcache_maple_populate() which attempts

SPI read to populate cache. SPI read requires mcp->dev and mcp->addr to

be set, without them, NULL pointer dereference occurs during probe.

Move initialization before mcp23s08_spi_regmap_init() call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00116 · 1.5th percentile
Published
2026-07-01T13:32Z
EPSS history
Timeline
  • 01 JUL 13:32Z
    pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init
    cvelistv5