Riskcovery

CVE-2026-46241

spi: mpc52xx: fix use-after-free on registration failure

State
Published
Severity
Not scored
Published
May 28, 2026
Updated
Oct 30, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: mpc52xx: fix use-after-free on registration failure

Make sure to disable and free the interrupts in case controller registration fails to avoid a potential use-after-free and resource leak.

This issue was flagged by Sashiko when reviewing a controller deregistration fix.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 42bbb70980f3720b0ae6da6af862af0e95a04351 to before b25eb3d24d03e571f09c04a0522c798ea35e48a1Affected
  • 42bbb70980f3720b0ae6da6af862af0e95a04351 to before dd74a790818ebb9a2be3a94ac935a374755cd278Affected
  • 42bbb70980f3720b0ae6da6af862af0e95a04351 to before 8b49b6aadd0c622ca7d68b4a53ae10362e221cf3Affected
  • 42bbb70980f3720b0ae6da6af862af0e95a04351 to before 336d9ad7560b3baba17af06727a888040ee93390Affected
  • 42bbb70980f3720b0ae6da6af862af0e95a04351 to before 5c77f11b9b5f1ad5a704dad875260c44016ede10Affected
  • 42bbb70980f3720b0ae6da6af862af0e95a04351 to before f62c060272b9d7423b1650b844e8e4e7b8f9f925Affected
LinuxLinux
  • 2.6.33Affected
  • before 2.6.33Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.90 through 6.12.*Not affected
  • 6.18.32 through 6.18.*Not affected
  • 7.0.9 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.