CVE-2026-46301

spi: topcliff-pch: fix use-after-free on unbind

HIGH

7.8

CVSS Score

Published: June 8, 2026 at 03:46 PM UTC

Updated: July 23, 2026 at 07:32 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.1 ≤ v < 5.10.2583.1 ≤ v < 5.15.2093.1 ≤ v < 6.1.1753.1 ≤ v < 6.12.883.1 ≤ v < 6.18.303.1 ≤ v < 6.6.1403.1 ≤ v < 7.0.73.1 ≤ v < 7.15.11 ≤ v < 5.15.2095.16 ≤ v < 6.1.1756.13 ≤ v < 6.18.306.19 ≤ v < 7.0.76.2 ≤ v < 6.6.1406.7 ≤ v < 6.12.883.1c37f3c2749b53225d36faa5c583203c5f12ae15b

Vendor states this is fixed in 0e8e57f9737ea257634db1d152fc430a0788a3e1 (fixed)

Vendor states this is fixed in 36e58c436d2c2a797800427dc04d74ffd8b6ce1c (fixed)

Vendor states this is fixed in 43334836b907adc21eab3079d2e6b26754468786 (fixed)

Vendor states this is fixed in 4ca90deeca1c7dd72c1c380ba8143565516def2d (fixed)

Vendor states this is fixed in 8822980668c96b5aa251c1e2daec1873262b8f3f (fixed)

Vendor states this is fixed in 9d72732fe70c11424bc90ed466c7ccfa58b42a9a (fixed)

Vendor states this is fixed in d50ef3553acbacce6f2843304d41d06dca358bb6 (fixed)

Vendor states this is fixed in d79e92161b65832e0b8cad5f3d84d17e5cd7a970 (fixed)

Vendor states this is fixed in 3.1 (unaffected)

Vendor states this is fixed in 5.10.258 (unaffected)

Vendor states this is fixed in 5.15.209 (unaffected)

Vendor states this is fixed in 6.1.175 (unaffected)