Riskcovery

CVE-2026-74415

spi: atcspi200: fix use-after-free when driver unbind

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: atcspi200: fix use-after-free when driver unbind

DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still alive and triggers DMA transfers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 34e3815ea4597131d4324a4aa243d2201e672005 to before af6a34c41683067a314d2b58b39edecb2e5e4ac6Affected
  • 34e3815ea4597131d4324a4aa243d2201e672005 to before 565bdf45125a05aa8f622f58f598283f46ba43f4Affected
LinuxLinux
  • 7.0Affected
  • before 7.0Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.