{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "6598b91b5ac32bc756d7c3000a31f775d4ead1c4"
            },
            {
              "fixed": "80c5bd0dca1cc5526ae0f4b273ccd163ed4caa4e"
            },
            {
              "fixed": "f13100b1f5f111989f0750540a795fdef47492af"
            },
            {
              "fixed": "df30056c78e8bead02d4be020199cabdbec0fef1"
            },
            {
              "fixed": "378b295f67102eef78cf2c28105f60ae1dab5cc1"
            },
            {
              "fixed": "118ce777d39f03cac99231196f820e4f998613a8"
            },
            {
              "fixed": "dee0774bbb2abb172e9069ce5ffef579b12b3ae9"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.0.0"
            },
            {
              "fixed": "6.1.167"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.130"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.78"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.20"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "6.19.10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23475.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: fix statistics allocation\n\nThe controller per-cpu statistics is not allocated until after the\ncontroller has been registered with driver core, which leaves a window\nwhere accessing the sysfs attributes can trigger a NULL-pointer\ndereference.\n\nFix this by moving the statistics allocation to controller allocation\nwhile tying its lifetime to that of the controller (rather than using\nimplicit devres).",
  "id": "CVE-2026-23475",
  "modified": "2026-08-12T03:51:21.990833594Z",
  "published": "2026-04-03T15:15:54.211Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/118ce777d39f03cac99231196f820e4f998613a8"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/378b295f67102eef78cf2c28105f60ae1dab5cc1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/80c5bd0dca1cc5526ae0f4b273ccd163ed4caa4e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/dee0774bbb2abb172e9069ce5ffef579b12b3ae9"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/df30056c78e8bead02d4be020199cabdbec0fef1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f13100b1f5f111989f0750540a795fdef47492af"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23475.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23475"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "spi: fix statistics allocation"
}