CVE-2026-46226
SPI Controller Deregistration Flaw in Linux Kernel
Publication date: 2026-05-28
Last updated on: 2026-05-28
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fsl | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability relates to the Linux kernel's SPI (Serial Peripheral Interface) driver for Freescale (fsl) controllers. The issue was that the controller was not properly deregistered before releasing underlying resources such as DMA (Direct Memory Access) during the driver unbind process. This could lead to improper resource management.
How can this vulnerability impact me? :
If the controller is not deregistered correctly before releasing resources, it could cause system instability or resource conflicts. This might lead to crashes or unpredictable behavior in systems using the affected Linux kernel SPI driver.