PT-2026-44315 · Linux+1 · Linux Kernel+1

CVE-2026-46192 · Published 2026-05-28 · Updated 2026-06-11

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description An issue exists in the microchip-core-qspi component of the SPI subsystem. The driver incorrectly attempts to transmit garbage data during emulated read-only dual or quad operations to generate clock cycles. Because QSPI lacks a dedicated master-out line similar to MOSI in standard SPI, this transmission can cause the transfer to fail or lead the core to lose track of the data direction (sending versus receiving).

Recommendations Update to a version of the Linux kernel where the microchip-core-qspi driver no longer transmits data during emulated read-only operations. Update openSUSE Tumbleweed to kernel-devel-7.0.11-1.1.

Exploit

Fix

Related Identifiers

CVE-2026-46192

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 291

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46192.json · Exploit
• https://git.kernel.org/stable/c/eb56deaabf127e8985fc91fa6c97bf8a3b062844 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-46192 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-46192 · Vendor Advisory
• https://git.kernel.org/stable/c/67184f361ab4d9fac6d2b8d5fed6649d496038a4 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46192 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46192 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46192 · Vendor Advisory
• https://git.kernel.org/stable/c/ec9d0ddbde6003c303fa5e1d5cd48952852984d8 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-46192 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-46192 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-46192 · Security Note
• https://suse.com/security/cve/CVE-2026-46166 · Note
• https://suse.com/security/cve/CVE-2026-45996 · Note