Riskcovery

CVE-2026-23068

spi: spi-sprd-adi: Fix double free in probe error path

State
Published
Severity
Not scored
Published
Feb 4, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: spi-sprd-adi: Fix double free in probe error path

The driver currently uses spi_alloc_host() to allocate the controller but registers it using devm_spi_register_controller().

If devm_register_restart_handler() fails, the code jumps to the put_ctlr label and calls spi_controller_put(). However, since the controller was registered via a devm function, the device core will automatically call spi_controller_put() again when the probe fails. This results in a double-free of the spi_controller structure.

Fix this by switching to devm_spi_alloc_host() and removing the manual spi_controller_put() call.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ac1775012058e13ef1522938e27f5973d9e3f053 to before bddd3d10d039729b81cfb0804520c8832a701a0eAffected
  • ac1775012058e13ef1522938e27f5973d9e3f053 to before 417cdfd9b9f986e95bfcb1d68eb443e6e0a15f8cAffected
  • ac1775012058e13ef1522938e27f5973d9e3f053 to before 346775f2b4cf839177e8e86b94aa180a06dc15b0Affected
  • ac1775012058e13ef1522938e27f5973d9e3f053 to before f6d6b3f172df118db582fe5ec43ae223a55d99cfAffected
  • ac1775012058e13ef1522938e27f5973d9e3f053 to before 383d4f5cffcc8df930d95b06518a9d25a6d74aacAffected
LinuxLinux
  • 4.17Affected
  • before 4.17Not affected
  • 6.1.162 through 6.1.*Not affected
  • 6.6.122 through 6.6.*Not affected
  • 6.12.68 through 6.12.*Not affected
  • 6.18.8 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.