NetSight
medium5.5

CVE-2026-63861

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback mtk_snand_probe…

Impact

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback mtk_snand_probe() registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action after successful registration so nand_ecc_unregister_on_host_hw_engine() runs automatically on probe failures and during device removal.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.19 before 6.1.175
from 6.2 before 6.6.141
from 6.7 before 6.12.91
from 6.13 before 6.18.33
from 6.19 before 7.0.10

References