In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psxpad_spi_suspend() retrieves the controller state with spi_get_drvdata(), but probe never stores it, so suspend dereferences a NULL pointer. Store it during probe.
Casky was already ahead
This CVE exploits attack patterns that Casky's 0matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.
CVE-2026-80752 is a null pointer dereference vulnerability in the Linux kernel's PSXPad-SPI driver that occurs during system suspend operations. The vulnerability arises because the probe function fails to store driver data using spi_set_drvdata(), but the suspend handler attempts to retrieve it via spi_get_drvdata(), resulting in a NULL pointer dereference. This affects systems using PlayStation controller input devices via SPI interface, particularly on embedded Linux systems and edge devices that rely on this driver. The CVSS score of 8.4 indicates high severity, as successful exploitation can lead to denial of service through kernel crashes during suspend/resume cycles.
While Casky.ai currently has no mapped skills for this specific vulnerability (0 matching skills), the underlying attack pattern relates to resource management and initialization failures. Practitioners using Casky would benefit from skills mapped to CWE-476 (Null Pointer Dereference) and techniques under Execution and Impact categories, which could detect anomalies in driver initialization sequences and crash patterns. The core issue—missing initialization logic between probe and suspend handlers—represents a common class of vulnerabilities that security teams should monitor through code review automation and runtime kernel behavior analysis. Organizations should patch affected Linux kernels immediately and monitor for unusual suspend/resume behavior or kernel panics on systems using PSXPad-SPI controllers.
Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →
Casky has 0 skills that investigate the attack patterns behind CVE-2026-80752. Run one and get CVSS-scored findings in 3 minutes.
Run the skill that detects this →© 2026 Casky.AI, Inc. · AI Security Investigation