← CVE Intelligence

CVE-2026-31389

spi: fix use-after-free on controller registration failure PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver core also in the unlikely event that per-cpu statistics allocation fails during controller registration to avoid use-after-free (of driver resources) and unclocked register accesses.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 before 0e23f50086da7d0b183dfeac26021acfcdee086b; affected 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 before 6bbd385b30c7fb6c7ee0669e9ada91490938c051; affected 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 before afe27c1f43aa57530011f419be6ddf71306565d2; affected 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 before 80f3e8cd2b4ad355b2ad2024cf423f6d183404f7; affected 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 before 23b51bad2eb8787aa74324cfccefb258515ae5ba; affected 6598b91b5ac32bc756d7c3000a31f775d4ead1c4 before 8634e05b08ead636e926022f4a98416e13440df9
Linux / Linuxaffected 6.0; unaffected 0 before 6.0; unaffected 6.1.167 through 6.1.*; unaffected 6.6.130 through 6.6.*; unaffected 6.12.78 through 6.12.*; unaffected 6.18.20 through 6.18.*; unaffected 6.19.10 through 6.19.*; unaffected 7.0 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

siemens-SADP

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.