In the Linux kernel, the following vulnerability has been resolved:

spi: Fix deadlock when adding SPI controllers on SPI buses

Currently we have a global spi_add_lock which we take when adding new
devices so that we can check that we're not trying to reuse a chip
select that's already controlled.  This means that if the SPI device is
itself a SPI controller and triggers the instantiation of further SPI
devices we trigger a deadlock as we try to register and instantiate
those devices while in the process of doing so for the parent controller
and hence already holding the global spi_add_lock.  Since we only care
about concurrency within a single SPI bus move the lock to be per
controller, avoiding the deadlock.

This can be easily triggered in the case of spi-mux.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

NIST: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NIST: CWE-667

OR
          *cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 from (excluding) 5.14.15
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (excluding) 5.4.286
          *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 from (excluding) 5.10.230

CVE: https://git.kernel.org/stable/c/6098475d4cb48d821bdf453c61118c56e26294f0

CVE: https://git.kernel.org/stable/c/722ef19a161ce3fffb3d1b01ce2301c306639bdd

kernel.org: https://git.kernel.org/stable/c/6098475d4cb48d821bdf453c61118c56e26294f0

kernel.org: https://git.kernel.org/stable/c/722ef19a161ce3fffb3d1b01ce2301c306639bdd

kernel.org: https://git.kernel.org/stable/c/aa3f3d7bef59583f2d3234173105a27ff61ef8fe

kernel.org: https://git.kernel.org/stable/c/c8dce228db6f81dbc897a018dfc5c418e917cf64

CVE: https://git.kernel.org/stable/c/6098475d4cb48d821bdf453c61118c56e26294f0 Types: Patch

CVE: https://git.kernel.org/stable/c/722ef19a161ce3fffb3d1b01ce2301c306639bdd Types: Patch

kernel.org: https://git.kernel.org/stable/c/6098475d4cb48d821bdf453c61118c56e26294f0 Types: Patch

kernel.org: https://git.kernel.org/stable/c/722ef19a161ce3fffb3d1b01ce2301c306639bdd Types: Patch

kernel.org: https://git.kernel.org/stable/c/aa3f3d7bef59583f2d3234173105a27ff61ef8fe Types: Patch

kernel.org: https://git.kernel.org/stable/c/c8dce228db6f81dbc897a018dfc5c418e917cf64 Types: Patch