CVE-2026-89620 | Linux Kernel up to 6.18.49/7.2.3 intel-quickspi write_cmd_to_txdma report_buf/report_buf_len heap-based overflow

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.49/7.2.3. This impacts the function write_cmd_to_txdma of the component intel-quickspi. The manipulation of the argument report_buf/report_buf_len results in heap-based buffer overflow.

This vulnerability is reported as CVE-2026-89620. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More