Linux Kernel Vulnerability in ADC Driver from Linux Foundation

CVE-2026-64501

What is CVE-2026-64501?

A vulnerability exists in the Linux kernel within the ADC driver that improperly manages the chip select (CS) line during SPI transfers. Specifically, the issue arises when the function ad_sigma_delta_single_conversion() does not correctly transition the device state, resulting in the CS line remaining asserted even after operations should have concluded. This mismanagement can lead to concurrent SPI access attempts, potentially causing data corruption and unintended behavior in connected devices. The flaw is particularly critical for devices lacking a physical CS pin, as it can prevent them from properly executing commands. Developers must apply the patch to ensure robust device operation and mitigate risks associated with this vulnerability.

References