PT-2026-34390 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-05-26 · CVE-2026-31485

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A teardown order issue exists in the spi-fsl-lpspi driver. The SPI controller is registered using devm spi register controller(), which delays unregistration until after the fsl lpspi remove() function returns. Because fsl lpspi remove() synchronously tears down DMA channels, a running SPI transfer can trigger a NULL pointer dereference resulting from a use-after-free condition in the fsl lpspi dma transfer() function.

Recommendations Update the Linux kernel to a version where devm spi register controller() is replaced by spi register controller() in fsl lpspi probe() and spi unregister controller() is added to fsl lpspi remove().

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-31485

ECHO-00FC-97A4-B599

Affected Products

Linux Kernel

References · 19

• https://git.kernel.org/stable/c/d5d01f24bc6fbde40b4e567ef9160194b61267bc · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31485 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31485 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31485 · Security Note
• https://git.kernel.org/stable/c/b341c1176f2e001b3adf0b47154fc31589f7410e · Patch
• https://git.kernel.org/stable/c/fbe6f40caeebb0b1ea9dfedc259124c1d3cda7a6 · Patch
• https://git.kernel.org/stable/c/15650dfbaeeb14bcaaf053b93cf631db8d465300 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31485 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31485 · Security Note
• https://git.kernel.org/stable/c/e3fd54f8b0317fbccc103961ddd660f2a32dcf0b · Patch
• https://git.kernel.org/stable/c/adb25339b66112393fd6892ceff926765feb5b86 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31485 · Vendor Advisory
• https://git.kernel.org/stable/c/e89e2b97253c124d37bf88e96e5e8ce5c3aeeec3 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31485 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31485 · Vendor Advisory