CVE-2026-53344
In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init Regmap initialization triggers regcache_maple_populate() which attempts SPI read to populate cache. SPI read requires mcp->dev and mcp->addr to be set, without them, NULL pointer dereference occurs during probe. Move initialization before mcp23s08_spi_regmap_init() call.
- Published Jul 1, 2026
- CVSS 5.5 medium
- 0.1% chance of exploitation in the next 30 days (EPSS)
- A fix is available