CVE-2026-93814
In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing transfer. This can leave the hardware in an inconsistent state, potentially causing the system to hang or fail to resume cleanly. Fix this by invoking the controller's target_abort callback from spi_controller_suspend() when the controller is in target mode and the callback is registered. This ensures any active target transfer is cleanly terminated before the controller is suspended.
Affected versions
Linux kernel versions
4.13
and later are affected. Fixed in
6.1.189,
6.6.158,
6.12.111,
6.18.53,
7.2
and their respective stable series.
References
5 totalFrequently asked questions
-
What is CVE-2026-93814?
CVE-2026-93814 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.13 onward and has been patched in 6.1.189, 6.6.158, 6.12.111 and others. CVE-2026-93814 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-93814?
Yes. CVE-2026-93814 has been patched. Fixed versions include 6.1.189, 6.6.158, 6.12.111 and others. If you are running Linux kernel 4.13 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-93814 actively exploited?
No. CVE-2026-93814 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.