NetSight
IP …
high7.8

CVE-2026-31389

In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from dri…

Impact

In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver core also in the unlikely event that per-cpu statistics allocation fails during controller registration to avoid use-after-free (of driver resources) and unclocked register accesses.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.0 before 6.1.167
from 6.2 before 6.6.130
from 6.7 before 6.12.78
from 6.13 before 6.18.20
from 6.19 before 6.19.10
Version 7.0

Weakness classification

CWE-416

References