Riskcovery

CVE-2026-23431

spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()

State
Published
Severity
Not scored
Published
Apr 3, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()

In aml_spisg_probe(), ctlr is allocated by spi_alloc_target()/spi_alloc_host(), but fails to call spi_controller_put() in several error paths. This leads to a memory leak whenever the driver fails to probe after the initial allocation.

Convert to use devm_spi_alloc_host()/devm_spi_alloc_target() to fix the memory leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cef9991e04aed3305c61c392e880f6e01a0c2ea4 to before bec21d97c968a4806939eb2946df49ea6c341bdeAffected
  • cef9991e04aed3305c61c392e880f6e01a0c2ea4 to before 8e28a01b69f7ea8df7ceb15470cfe643b2828f4fAffected
  • cef9991e04aed3305c61c392e880f6e01a0c2ea4 to before b8db9552997924b750e727a625a30eaa4603bbb9Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.20 through 6.18.*Not affected
  • 6.19.10 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.