Incorrect calculation in Linux kernel - CVE-2026-74276

Vulnerability identifier: #VU142926

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-74276

CWE-ID: CWE-682

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper buffer size calculation in the xilinx SPI driver FIFO size detection logic when handling SPI transactions in irq mode. A local user can trigger an SPI transaction of the assumed FIFO size or more to cause a denial of service.

The issue can cause the driver to spin in a while loop forever after one received byte is lost because the RX FIFO is smaller than the incorrectly assumed size.

Linux kernel
Ubuntu
linux-nvidia (Ubuntu package)
linux-gcp-7.0 (Ubuntu package)
linux (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux-azure-7.0 (Ubuntu package)
linux-azure (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux-nvidia (Ubuntu package) - addressed in versions 5.15.0-1112.113, 5.15.0.1112.112
linux-gcp-7.0 (Ubuntu package) - addressed in versions 7.0.0-38.38~24.04.4, 7.0.0-1013.13~24.04.1, 7.0.0-1014.14~24.04.1
linux (Ubuntu package) - addressed in versions 7.0.0-38.38, 7.0.0-38.38.1, 7.0.0-1008.9, 7.0.0-1013.13~24.04.1, 7.0.0-1014.14, 7.0.0-1015.15
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1015.15
linux-azure-7.0 (Ubuntu package) - addressed in versions 7.0.0-1016.16~24.04.1, 7.0.0-1017.17~24.04.1
linux-azure (Ubuntu package) - addressed in versions 7.0.0-1016.16, 7.0.0-1017.17

• https://git.kernel.org/stable/c/1c9246a199e19b2fd36e94feed60e55f27103a4f
• https://git.kernel.org/stable/c/1fc6a6c0cc7796b0c1cf4eec3f0720f422f09273
• https://git.kernel.org/stable/c/47f3b5365536e8c38f264824ab15fdb74454e066
• https://git.kernel.org/stable/c/4ee65558a7fda463222f5edc631b6d7862218725
• https://git.kernel.org/stable/c/d1944b71c18e7494756bff1a6f80c25be99eaecb
• https://git.kernel.org/stable/c/d7ccd8736b67550eca746ed7fa39a36016ff114b
• https://git.kernel.org/stable/c/dfab0d4698a642bab9b895e2e6d240838cfe2cc6
• https://git.kernel.org/stable/c/e98f589d54068dfcc7da42d9b730e47b84e2991a

• Incorrect calculation in Linux kernel spi driver
• Ubuntu update for linux-gcp-7.0
• Ubuntu update for linux-nvidia
• Ubuntu update for linux-azure-7.0
• Ubuntu update for linux
• Ubuntu update for linux-azure
• Ubuntu update for linux-oem-7.0