CVEvulnerability
CVE-2026-46219
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-05-28
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-416
Description
In the Linux kernel, the following vulnerability has been resolved:
spi: mpc52xx: fix use-after-free on unbind
The state machine work is scheduled by the interrupt handler and
therefore needs to be cancelled after disabling interrupts to avoid a
potential use-after-free.
Affected configurations
• linux linux kernel (>= 5.4.287 < 5.5)
• linux linux kernel (>= 5.10.231 < 5.10.258)
• linux linux kernel (>= 5.15.174 < 5.15.209)
• linux linux kernel (>= 6.1.120 < 6.1.175)
• linux linux kernel (>= 6.6.66 < 6.6.140)
• linux linux kernel (>= 6.12.5 < 6.12.90)
• linux linux kernel (>= 6.13.1 < 6.18.32)
• linux linux kernel (>= 6.19 < 7.0.9)
• linux linux kernel 6.13
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://git.kernel.org/stable/c/0944b20e9dfa2917bd70eb5b301cbb67fe54a718 Patch
- https://git.kernel.org/stable/c/6c3e413919a12627d04a31a4a5fccb9fc129bb02 Patch
- https://git.kernel.org/stable/c/706b3dc2ac7a998c55e14b3fd2e8f934c367e6e0 Patch
- https://git.kernel.org/stable/c/ac8316c896c79f32c1d0a38cb41fd2b14cf8112e Patch
- https://git.kernel.org/stable/c/bb6b50f709c5a01906ff72a07fdc070bb3357188 Patch
- https://git.kernel.org/stable/c/bbcd6dd8e9f264440eaf6167382bf404911c1c46 Patch
- https://git.kernel.org/stable/c/ed929d40963073f23cfb50219ccbcc6e0c3ea641 Patch
- https://git.kernel.org/stable/c/ee52da0dd83ebcd89ecbbe2660c57b15a25489f2 Patch