Inadequate Error Handling in Linux Kernel's SPI Driver Affects QCOM QSPI Products

CVE-2026-97512

What is CVE-2026-97512?

A vulnerability in the Linux kernel's SPI driver for QCOM QSPI results from insufficient error handling in runtime power management (PM) functions. This flaw can leave the system in an inconsistent state if an operation fails during suspend or resume processes, risking clock and power imbalances. The vulnerability was mitigated by enhancing error checking throughout all operations and implementing goto-based cleanup protocols. This ensures that any successfully acquired resources are properly released in event of an error, ultimately preventing potential performance and stability issues.

References