The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - spi: microchip-core-qspi: control built-in cs manually The coreQSPI IP supports only a single chip select,     which is automagically operated by the hardware - set low when the transmit buffer first gets written to     and set high when the number of bytes written to the TOTALBYTES field of the FRAMES register have been     sent on the bus. Additional devices must use GPIOs for their chip selects. It was reported to me that if     there are two devices attached to this QSPI controller that the in-built chip select is set low while     linux tries to access the device attached to the GPIO. This went undetected as the boards that connected     multiple devices to the SPI controller all exclusively used GPIOs for chip selects, not relying on the     built-in chip select at all. It turns out that this was because the built-in chip select, when controlled     automagically, is set low when active and high when inactive, thereby ruling out its use for active-high     devices or devices that need to transmit with the chip select disabled. Modify the driver so that it     controls chip select directly, retaining the behaviour for mem_ops of setting the chip select active for     the entire duration of the transfer in the exec_op callback. For regular transfers, implement the set_cs     callback for the core to use. As part of this, the existing setup callback, mchp_coreqspi_setup_op(), is     removed. Modifying the CLKIDLE field is not safe to do during operation when there are multiple devices,     so this code is removed entirely. Setting the MASTER and ENABLE fields is something that can be done once     at probe, it doesn't need to be re-run for each device. Instead the new setup callback sets the built-in     chip select to its inactive state for active-low devices, as the reset value of the chip select in     software controlled mode is low. (CVE-2026-46148)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-46148

medium Nessus Plugin ID 317613

Version 1.4