Riskcovery

CVE-2026-31489

spi: meson-spicc: Fix double-put in remove path

State
Published
Severity
Not scored
Published
Apr 22, 2026
Updated
Jun 19, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: meson-spicc: Fix double-put in remove path

meson_spicc_probe() registers the controller with devm_spi_register_controller(), so teardown already drops the controller reference via devm cleanup.

Calling spi_controller_put() again in meson_spicc_remove() causes a double-put.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 05565b469358a9a03034f7f712d83590a9f125a4 to before 01f5f7976c24d6e9beef6b5a410af3b9b1d4d476Affected
  • 8311ee2164c5cd1b63a601ea366f540eae89f10e to before d61bcec3aec6f0244a9b963e0c76c00f771d49b6Affected
  • 8311ee2164c5cd1b63a601ea366f540eae89f10e to before 7434c64ddae88a02e7fb478bc256cc100d48d3e3Affected
  • 8311ee2164c5cd1b63a601ea366f540eae89f10e to before 0d645c6d13fa0597935d3d16b09a7ba5d24ed284Affected
  • 8311ee2164c5cd1b63a601ea366f540eae89f10e to before 40ad0334c17b23d8b66b1082ad1478a6202e90e2Affected
  • 8311ee2164c5cd1b63a601ea366f540eae89f10e to before da06a104f0486355073ff0d1bcb1fcbebb7080d6Affected
  • 8311ee2164c5cd1b63a601ea366f540eae89f10e to before 9b812ceb75a6260c17c91db4b9e74ead8cfa06f5Affected
  • 8311ee2164c5cd1b63a601ea366f540eae89f10e to before 63542bb402b7013171c9f621c28b609eda4dbf1fAffected
  • ff056817560d72363b463ddac27822dc8c121280Affected
  • 683b47d0ebb10ba0d272604b09686e023d10d40cAffected
  • a5bf7ef13ebf6adf62a69ab3542d4fc0564c082eAffected
  • f2ca988aba4eaad1319e80eb1316a4ba5dbd6897Affected
  • 5.10.58 to before 5.10.259Affected
  • 4.14.244 to before 4.15Affected
  • 4.19.203 to before 4.20Affected
  • 5.4.140 to before 5.5Affected
  • 5.13.10 to before 5.14Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.10.259 through 5.10.*Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.175 through 6.1.*Not affected
  • 6.6.140 through 6.6.*Not affected
  • 6.12.80 through 6.12.*Not affected
  • 6.18.21 through 6.18.*Not affected
  • 6.19.11 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.