CVE-2026-23475
Fixed in a distro release EPSS <1%
In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller per-cpu statistics is not allocated until after the controller has been registered with driver core, which leaves a window where accessing the sysfs attributes can trigger a NULL-pointer dereference. Fix this by moving the statistics allocation to controller allocation while tying its lifetime to that of the controller (rather than using implicit devres).
Products: Linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | linux | 6.1.170-1 |
| Debian 13 | linux | 6.12.85-1 |
| Debian 14 | linux | 6.19.10-1 |
| SUSE Linux Enterprise High Availability Extension 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_15 | 1-150700.15.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-64kb | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default-base | 6.4.0-150700.53.55.1.150700.17.33.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-source | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-zfcpdump | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-docs | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-obs-build | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-source | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-syms | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-azure | 6.4.0-150700.53.55.1 |
| SUSE Linux Enterprise Workstation Extension 15 SP7 | kernel-default | 6.4.0-150700.53.55.1 |
| SUSE Linux Micro Extras 6.2 | kernel-obs-build | 6.12.0-160000.33.1 |
| SUSE Linux Micro Extras 6.2 | kernel-syms | 6.12.0-160000.33.1 |
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-gke-4.15 | no fix |
| Ubuntu 18.04 LTS | linux-gke-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-gkeop-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-gke-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-gkeop | no fix |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-intel-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.10 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.14 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.6 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.8 | no fix |
| Ubuntu 22.04 LTS | linux-allwinner-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-aws-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1061.64~22.04.1 |
| Ubuntu 22.04 LTS | linux-azure-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1063.71~22.04.1 |
| Ubuntu 22.04 LTS | linux-azure-fde-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1062.69~22.04.1 |
| Ubuntu 22.04 LTS | linux-gcp-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1064.72~22.04.1 |
| Ubuntu 22.04 LTS | linux-hwe-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-136.136~22.04.1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1061.62~22.04.1 |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-136.136.2~22.04.1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1059.62~22.04.1 |
| Ubuntu 22.04 LTS | linux-oem-5.17 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.0 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.1 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-oracle-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1058.61~22.04.1 |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-riscv-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-riscv-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-136.136~22.04.3 |
| Ubuntu 22.04 LTS | linux-starfive-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-6.5 | no fix |
| Ubuntu 24.04 LTS | linux | 6.8.0-136.136 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1061.64 |
| Ubuntu 24.04 LTS | linux-aws-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-aws-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1063.71 |
| Ubuntu 24.04 LTS | linux-azure-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1062.69 |
| Ubuntu 24.04 LTS | linux-azure-fde-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-azure-nvidia | no fix |
| Ubuntu 24.04 LTS | linux-azure-nvidia-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1064.72 |
| Ubuntu 24.04 LTS | linux-gcp-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1059.67 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1046.50 |
| Ubuntu 24.04 LTS | linux-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1061.62 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-136.136.2 |
| Ubuntu 24.04 LTS | linux-lowlatency-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1059.62 |
| Ubuntu 24.04 LTS | linux-nvidia-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1059.62.1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1030.31 |
| Ubuntu 24.04 LTS | linux-oem-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.8 | no fix |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1058.61 |
| Ubuntu 24.04 LTS | linux-oracle-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1061.65 |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu 24.04 LTS | linux-realtime | no fix |
| Ubuntu 24.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1033.34 |
| Ubuntu 25.10 | linux | no fix |
| Ubuntu 25.10 | linux-aws | no fix |
| Ubuntu 25.10 | linux-azure | no fix |
| Ubuntu 25.10 | linux-azure-fde | no fix |
| Ubuntu 25.10 | linux-gcp | no fix |
| Ubuntu 25.10 | linux-oracle | no fix |
| Ubuntu 25.10 | linux-raspi | no fix |
| Ubuntu 25.10 | linux-realtime | no fix |
| Ubuntu 25.10 | linux-riscv | no fix |
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1028.33 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1061.64+fips1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1063.71+fips2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-136.136+fips2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1064.72+fips1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1056.57~22.04.2 |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2050.52 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1056.57 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | no fix |