Unclocked Access Vulnerability in Cadence QuadSPI Driver for Linux Kernel

CVE-2026-46203

What is CVE-2026-46203?

A vulnerability in the Cadence QuadSPI driver for the Linux kernel has been identified, which pertains to unclocked register access during the driver unbind process. Specifically, if the controller is not properly runtime resumed before being disabled, it can lead to undefined behavior. This problem was flagged during a review of a controller deregistration fix. Addressing this issue is crucial to ensure the stability and security of the Linux kernel environment.

References