CVE-2026-97512

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM

The runtime PM functions had incomplete error handling that could leave the

system in an inconsistent state. If any operation failed midway through

suspend or resume, some resources would be left in the wrong state while

others were already changed, leading to potential clock/power imbalances.

Reorder the suspend/resume sequences to avoid brownout risk by ensuring the

performance state is set appropriately before clocks are enabled and clocks

are disabled before dropping the performance state.

Fix by adding proper error checking for all operations and using goto-based

cleanup to ensure all successfully acquired resources are properly released

on any error.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References