{
  "cveId": "CVE-2026-46203",
  "url": "https://patchblox.com/security/cve/CVE-2026-46203",
  "summary": "CVE-2026-46203 is fixed in linux on 1 platform, first by DEBIAN-CVE-2026-46203, released June 24, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  spi: cadence-quadspi: fix unclocked access on un...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  spi: cadence-quadspi: fix unclocked access on unbind  Make sure that the controller is runtime resumed before disabling it during driver unbind to avoid an unclocked register access.  This issue was flagged by Sashiko when reviewing a controller deregistration fix.",
  "published": "2026-05-28T10:16:35Z",
  "severity": "high",
  "cvss": 7.1,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
  "epss": 0.00131,
  "epssPercentile": 0.02711,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.94-1",
      "fix": "DEBIAN-CVE-2026-46203",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-46203",
      "released": "2026-06-24T14:07:24Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.0.9-1",
      "fix": "DEBIAN-CVE-2026-46203",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-46203",
      "released": "2026-06-24T14:07:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}