SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-80752

HIGH · CVSS 8.4 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's psxpad-spi driver, where the function psxpad_spi_suspend() attempts to access driver data that has not been initialized, leading to a potential NULL pointer dereference. This could result in a system crash or instability during the suspend operation. Linux system administrators and developers using this driver should prioritize applying the fix to ensure system reliability and prevent unexpected downtime.

CVE
CVE-2026-80752
Severity
HIGH
CVSS
8.4
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad_spi_suspend() retrieves the controller state with spi_get_drvdata(), but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe.