PT-2026-6138 · Linux+1 · Linux Kernel+1
Published
2026-01-01
·
Updated
2026-05-22
·
CVE-2026-23068
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel driver for spi-sprd-adi contains a flaw where a double-free of the
spi controller structure can occur. This happens when devm register restart handler() fails, causing the code to call spi controller put(). Because the controller was registered using a devm function, the device core also calls spi controller put(), leading to the double-free. The issue arises from using spi alloc host() for allocation and devm spi register controller() for registration.Recommendations
Switch to using
devm spi alloc host() and remove the manual spi controller put() call.Exploit
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Ubuntu