spi: microchip-core-qspi: control built-in cs manually
In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-in cs manually The coreQSPI IP supports only a single chip select, which is automagically operated by the hardware - set low when the transmit buffer first gets written to and set high when the number of bytes written to the TOTALBYTES field of the FRAMES register have been sent on the bus. Additional devices must use GPIOs for their chip selects. It was reported to me that if there are two devices attached to this QSPI controller that the in-built chip select is set low while linux tries to access the device attached to the GPIO. This went undetected as the boards that connected multiple devices to the SPI controller all exclusively used GPIOs for chip selects, not relying on the built-in chip select at all. It turns out that this was because the built-in chip select, when controlled automagically, is set low when active and high when inactive, thereby ruling out its use for active-high devices or devices that need to transmit with the chip select disabled. Modify the driver so that it controls chip select directly, retaining the behaviour for mem_ops of setting the chip select active for the entire duration of the transfer in the exec_op callback. For regular transfers, implement the set_cs callback for the core to use. As part of this, the existing setup callback, mchp_coreqspi_setup_op(), is removed. Modifying the CLKIDLE field is not safe to do during operation whe
CVE-2026-46148
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-46148
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "8596124c4c1bc7561454cee0463c16eca70b5d25",
"lessThan": "783dc000b8be6d18713bde4d2705e168f2a61782",
"versionType": "git"
},
{
"status": "affected",
"version": "8596124c4c1bc7561454cee0463c16eca70b5d25",
"lessThan": "244fc8942123afe753ae8962407fb312a1d96a07",
"versionType": "git"
},
{
"status": "affected",
"version": "8596124c4c1bc7561454cee0463c16eca70b5d25",
"lessThan": "998f43196d732f20f9b71eb6ebd973736c9fa911",
"versionType": "git"
},
{
"status": "affected",
"version": "8596124c4c1bc7561454cee0463c16eca70b5d25",
"lessThan": "ee3c99aa102212ad59dc2c19595515c4a6729307",
"versionType": "git"
},
{
"status": "affected",
"version": "8596124c4c1bc7561454cee0463c16eca70b5d25",
"lessThan": "7672749e1496215e8683ce57cf323119033954cf",
"versionType": "git"
}
],
"programFiles": [
"drivers/spi/spi-microchip-core-qspi.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.1"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.6.160",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.114",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.30",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.0.7",
"versionType": "semver",
"lessThanOrEqual": "7.0.*"
},
{
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/spi/spi-microchip-core-qspi.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-46148
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #46328 · Revision 1
- Added to Heist Feed
- Publisher date