CVE-2026-46219

spi: mpc52xx: fix use-after-free on unbind

State: Published
Severity: Not scored
Published: May 28, 2026
Updated: Jun 14, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: mpc52xx: fix use-after-free on unbind

The state machine work is scheduled by the interrupt handler and therefore needs to be cancelled after disabling interrupts to avoid a potential use-after-free.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e0c6ce8424095c2da32a063d3fc027494c689817 to before ac8316c896c79f32c1d0a38cb41fd2b14cf8112eAffected cd5106c77d6d6828aa82449f01f4eb436d602a21 to before ed929d40963073f23cfb50219ccbcc6e0c3ea641Affected 373d55a47dc662e5e30d12ad5d334312f757c1f1 to before 0944b20e9dfa2917bd70eb5b301cbb67fe54a718Affected f65d85bc1ffd8a2c194bb2cd65e35ed3648ddd59 to before bb6b50f709c5a01906ff72a07fdc070bb3357188Affected 90b72189de2cddacb26250579da0510b29a8b82b to before ee52da0dd83ebcd89ecbbe2660c57b15a25489f2Affected 984836621aad98802d92c4a3047114cf518074c8 to before 6c3e413919a12627d04a31a4a5fccb9fc129bb02Affected 984836621aad98802d92c4a3047114cf518074c8 to before bbcd6dd8e9f264440eaf6167382bf404911c1c46Affected 984836621aad98802d92c4a3047114cf518074c8 to before 706b3dc2ac7a998c55e14b3fd2e8f934c367e6e0Affected d0cde3911cf24e1bcdd4caa1d1b9ef57589db5a1Affected 5.10.231 to before 5.10.258Affected 5.15.174 to before 5.15.209Affected 6.1.120 to before 6.1.175Affected 6.6.66 to before 6.6.140Affected 6.12.5 to before 6.12.90Affected 5.4.287 to before 5.5Affected
LinuxLinux	6.13Affected before 6.13Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.90 through 6.12.Not affected 6.18.32 through 6.18.Not affected 7.0.9 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

e0c6ce8424095c2da32a063d3fc027494c689817 to before ac8316c896c79f32c1d0a38cb41fd2b14cf8112eAffected
cd5106c77d6d6828aa82449f01f4eb436d602a21 to before ed929d40963073f23cfb50219ccbcc6e0c3ea641Affected
373d55a47dc662e5e30d12ad5d334312f757c1f1 to before 0944b20e9dfa2917bd70eb5b301cbb67fe54a718Affected
f65d85bc1ffd8a2c194bb2cd65e35ed3648ddd59 to before bb6b50f709c5a01906ff72a07fdc070bb3357188Affected
90b72189de2cddacb26250579da0510b29a8b82b to before ee52da0dd83ebcd89ecbbe2660c57b15a25489f2Affected
984836621aad98802d92c4a3047114cf518074c8 to before 6c3e413919a12627d04a31a4a5fccb9fc129bb02Affected
984836621aad98802d92c4a3047114cf518074c8 to before bbcd6dd8e9f264440eaf6167382bf404911c1c46Affected
984836621aad98802d92c4a3047114cf518074c8 to before 706b3dc2ac7a998c55e14b3fd2e8f934c367e6e0Affected
d0cde3911cf24e1bcdd4caa1d1b9ef57589db5a1Affected
5.10.231 to before 5.10.258Affected
5.15.174 to before 5.15.209Affected
6.1.120 to before 6.1.175Affected
6.6.66 to before 6.6.140Affected
6.12.5 to before 6.12.90Affected
5.4.287 to before 5.5Affected

LinuxLinux

6.13Affected
before 6.13Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.90 through 6.12.*Not affected
6.18.32 through 6.18.*Not affected
7.0.9 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.