vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-46241

spi: mpc52xx: fix use-after-free on registration failure

HIGH
7.8
CVSS Score
Published: May 28, 2026 at 09:41 AM UTC
Updated: October 21, 2026 at 01:19 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration failure Make sure to disable and free the interrupts in case controller registration fails to avoid a potential use-after-free and resource leak. This issue was flagged by Sashiko when reviewing a controller deregistration fix.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
2.6.33 ≤ v < 6.12.906.13 ≤ v < 6.18.326.19 ≤ v < 7.0.92.6.3342bbb70980f3720b0ae6da6af862af0e95a04351
Vendor states this is fixed in 336d9ad7560b3baba17af06727a888040ee93390 (fixed)
Vendor states this is fixed in 5c77f11b9b5f1ad5a704dad875260c44016ede10 (fixed)
Vendor states this is fixed in 8b49b6aadd0c622ca7d68b4a53ae10362e221cf3 (fixed)
Vendor states this is fixed in f62c060272b9d7423b1650b844e8e4e7b8f9f925 (fixed)
Vendor states this is fixed in 2.6.33 (unaffected)
Vendor states this is fixed in 6.12.90 (unaffected)
Vendor states this is fixed in 6.18.32 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.0.9 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

References (5)

Patch
Source: cverecord
https://git.kernel.org/stable/c/8b49b6aadd0c622ca7d68b4a53ae10362e221cf3
Patch
Source: cverecord
https://git.kernel.org/stable/c/336d9ad7560b3baba17af06727a888040ee93390
Patch
Source: cverecord
https://git.kernel.org/stable/c/5c77f11b9b5f1ad5a704dad875260c44016ede10
Patch
Source: cverecord
https://git.kernel.org/stable/c/f62c060272b9d7423b1650b844e8e4e7b8f9f925
Source: cverecord
https://git.kernel.org/stable/c/dd74a790818ebb9a2be3a94ac935a374755cd278

CVSS

7.8HIGH[email protected]
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-416

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card