01 Record

CVE-2026-80752

Input: psxpad-spi - set driver data before use

HighPUBLISHEDCNA: Linux

CNA base score8.4 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

Input: psxpad-spi - set driver data before use

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 9.2% of scored records. A rank, not a probability.
NVD base score: 8.4 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Received. NVD last modified this record on 2026-09-04.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-03 08:26Z1 MO AGO

Last updated

2026-09-04 04:58Z1 MO AGO

Reserved

2026-08-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.4)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

e6f72b49873693121d5647f629ba16962de888a30ad30a95fddc64c5b875e807

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux8be193c7b1f44d3f4dcb27107df0831709c2deb1 to < e980066e434a9c74ff1665ed9140427e95b0ee7c, 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to < 1bba6bd6861b1e0c8ecf20cd1892f0d3877c02a2, 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to < 86531cdfb3a03213e2569deed5195412a4e3f7ee, 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to < da6b8b05db0cf43e0cc198431fa8ee9739b3b817, 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to < 1edcb7ffee7ac4dc35cbe5bbd0e27bac3614ebe4, 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to < 8d622c58205adbc8af19864e277386528b671345, 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to < 62e25677d1440085381b047ec4984be9b6793759, 8be193c7b1f44d3f4dcb27107df0831709c2deb1 to < 732f38c36059e68ba3b4b89c56911d777fd3185c, 4.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e980066e434a9c74ff1665ed9140427e95b0ee7c
git.kernel.orghttps://git.kernel.org/stable/c/1bba6bd6861b1e0c8ecf20cd1892f0d3877c02a2
git.kernel.orghttps://git.kernel.org/stable/c/86531cdfb3a03213e2569deed5195412a4e3f7ee
git.kernel.orghttps://git.kernel.org/stable/c/da6b8b05db0cf43e0cc198431fa8ee9739b3b817
git.kernel.orghttps://git.kernel.org/stable/c/1edcb7ffee7ac4dc35cbe5bbd0e27bac3614ebe4
git.kernel.orghttps://git.kernel.org/stable/c/8d622c58205adbc8af19864e277386528b671345
git.kernel.orghttps://git.kernel.org/stable/c/62e25677d1440085381b047ec4984be9b6793759
git.kernel.orghttps://git.kernel.org/stable/c/732f38c36059e68ba3b4b89c56911d777fd3185c

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.105-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.