CVE-2026-45996

spi: imx: fix use-after-free on unbind

At a glance

Severity: Not available
EPSS: EPSS 0.14 % · percentile 3 (2026-10-27)
State: PUBLISHED
Published: 2026-05-27
Updated: 2026-06-19
Assigner: Linux
NVD status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix use-after-free on unbind The SPI subsystem frees the controller and any subsystem allocated driver data as part of deregistration (unless the allocation is device managed). Take another reference before deregistering the controller so that the driver data is not freed until the driver is done with it.

Scores

Version	Score	Vector	Scored by
CVSS 3.1	HIGH 7.8	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)

Weaknesses (CWE)

CWE-416

European references

ENISA EUVD · EUVD-2026-32292
GCVE · GCVE-0-2026-45996

CERT-FR advisories

CERTFR-2026-AVI-1066 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
CERTFR-2026-AVI-1064 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2026-AVI-0954 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
CERTFR-2026-AVI-0927 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
CERTFR-2026-AVI-0926 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
CERTFR-2026-AVI-0862 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
CERTFR-2026-AVI-0861 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
CERTFR-2026-AVI-0831 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
CERTFR-2026-AVI-0731 — Multiples vulnérabilités dans les produits Microsoft · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.19 < 6.6.140
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.7 < 6.12.86
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.13 < 6.18.27
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.19 < 7.0.4

Affected products

Product	Versions
Linux · Linux	affected 307c897db762d1e0feee9477276b08f6deca4a5b < c7c40c3e7b9fb900504aa746de3e53c5275b24bd ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < f99165ef067723221472ce1aff632bc74f562643 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 385a330083f8dd47c15b02e9a83aef9234a37003 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 132e47030b0b5e398e0da6c59df5a5dae9b52cff ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < aa9025a498036b6012769f7af36d421385386c17 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 1c78c2002380a1fe31bfb01a3d5f29809e55a096
Linux · Linux	affected 5.19 ; unaffected 0 < 5.19 ; unaffected 6.1.176 ≤ 6.1.* ; unaffected 6.6.140 ≤ 6.6.* ; unaffected 6.12.86 ≤ 6.12.* ; unaffected 6.18.27 ≤ 6.18.*

Product

Versions

Linux · Linux

affected 307c897db762d1e0feee9477276b08f6deca4a5b < c7c40c3e7b9fb900504aa746de3e53c5275b24bd ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < f99165ef067723221472ce1aff632bc74f562643 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 385a330083f8dd47c15b02e9a83aef9234a37003 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 132e47030b0b5e398e0da6c59df5a5dae9b52cff ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < aa9025a498036b6012769f7af36d421385386c17 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 1c78c2002380a1fe31bfb01a3d5f29809e55a096

Linux · Linux

affected 5.19 ; unaffected 0 < 5.19 ; unaffected 6.1.176 ≤ 6.1.* ; unaffected 6.6.140 ≤ 6.6.* ; unaffected 6.12.86 ≤ 6.12.* ; unaffected 6.18.27 ≤ 6.18.*

References

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD