CVE-2026-45996
spi: imx: fix use-after-free on unbind
En bref Sévérité Non disponible EPSS EPSS 0.14 % · centile 3 (2026-10-27) État PUBLISHED Publiée 2026-05-27 Mise à jour 2026-06-19 Attribuée par Linux Statut NVD Modified Description In the Linux kernel, the following vulnerability has been resolved:
spi: imx: fix use-after-free on unbind
The SPI subsystem frees the controller and any subsystem allocated
driver data as part of deregistration (unless the allocation is device
managed).
Take another reference before deregistering the controller so that the
driver data is not freed until the driver is done with it.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.19 < 6.6.140cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.7 < 6.12.86cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.13 < 6.18.27cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.19 < 7.0.4Produits affectés Produit Versions Linux · Linux affected 307c897db762d1e0feee9477276b08f6deca4a5b < c7c40c3e7b9fb900504aa746de3e53c5275b24bd ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < f99165ef067723221472ce1aff632bc74f562643 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 385a330083f8dd47c15b02e9a83aef9234a37003 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 132e47030b0b5e398e0da6c59df5a5dae9b52cff ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < aa9025a498036b6012769f7af36d421385386c17 ; affected 307c897db762d1e0feee9477276b08f6deca4a5b < 1c78c2002380a1fe31bfb01a3d5f29809e55a096 Linux · Linux affected 5.19 ; unaffected 0 < 5.19 ; unaffected 6.1.176 ≤ 6.1.* ; unaffected 6.6.140 ≤ 6.6.* ; unaffected 6.12.86 ≤ 6.12.* ; unaffected 6.18.27 ≤ 6.18.*
Références
Sources
