{"id":"CVE-2026-93814","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: core: Abort active target transfer on controller suspend\n\nWhen an SPI controller operating in target mode has a transfer in\nprogress at the time of system suspend,…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: core: Abort active target transfer on controller suspend\n\nWhen an SPI controller operating in target mode has a transfer in\nprogress at the time of system suspend,…","severity":"medium","vendor":"Linux","product":"Linux","affected":["Linux >= 6c364062bfed3c34490e85bea52ff6e2d4f0f281 < a75d9eb78c89d3fa8d503966c91a51f02eced768","Linux >= 6c364062bfed3c34490e85bea52ff6e2d4f0f281 < 1cc84ca8599b8fa64014821bca453ebb3326c71e","Linux >= 6c364062bfed3c34490e85bea52ff6e2d4f0f281 < b81ac605763c319ca9928a237818ab4e8ab7bb59","Linux >= 6c364062bfed3c34490e85bea52ff6e2d4f0f281 < f6a0cafa265c8a4aed585d873747e3b88b146eed","Linux >= 6c364062bfed3c34490e85bea52ff6e2d4f0f281 < c1bab046d4786c5b17aab7c5225bf0d4a2a2d19b","Linux 4.13"],"published":"2026-09-24","updated":"2026-10-03","sourceUpdated":"2026-10-03T11:17:51.293","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93814","references":[{"url":"https://git.kernel.org/stable/c/1cc84ca8599b8fa64014821bca453ebb3326c71e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a75d9eb78c89d3fa8d503966c91a51f02eced768","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b81ac605763c319ca9928a237818ab4e8ab7bb59","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c1bab046d4786c5b17aab7c5225bf0d4a2a2d19b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f6a0cafa265c8a4aed585d873747e3b88b146eed","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93814.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-93814"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2540395"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-93814"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93814"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93814.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00168,"epssPercentile":0.06046,"ingestedAt":"2026-09-24T16:47:15.894Z","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":["CWE-459"],"slug":"CVE-2026-93814","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nspi: core: Abort active target transfer on controller suspend\n\nWhen an SPI controller operating in target mode has a transfer in\nprogress at the time of system suspend, the suspend path proceeds\nwithout aborting the ongoing transfer. This can leave the hardware in\nan inconsistent state, potentially causing the system to hang or fail\nto resume cleanly.\n\nFix this by invoking the controller's target_abort callback from\nspi_controller_suspend() when the controller is in target mode and the\ncallback is registered. This ensures any active target transfer is\ncleanly terminated before the controller is suspended.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-93814.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":224215,"id":"CVE-2026-93814","ts":1792325020905,"field":"cvss","old":null,"new":"5.5"},{"seq":224214,"id":"CVE-2026-93814","ts":1792325020905,"field":"severity","old":"none","new":"medium"}]}