{"id":"CVE-2026-46241","state":"PUBLISHED","title":"spi: mpc52xx: fix use-after-free on registration failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: fix use-after-free on registration failure\n\nMake sure to disable and free the interrupts in case controller\nregistration fails to avoid a potential use-after-free and resource\nleak.\n\nThis issue was flagged by Sashiko when reviewing a controller\nderegistration fix.","publishedAt":"2026-05-28T09:41:09.145Z","updatedAt":"2026-10-30T12:26:12.028Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"b25eb3d24d03e571f09c04a0522c798ea35e48a1","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"dd74a790818ebb9a2be3a94ac935a374755cd278","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"8b49b6aadd0c622ca7d68b4a53ae10362e221cf3","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"336d9ad7560b3baba17af06727a888040ee93390","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"5c77f11b9b5f1ad5a704dad875260c44016ede10","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"f62c060272b9d7423b1650b844e8e4e7b8f9f925","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/spi/spi-mpc52xx.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.33","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.33","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.160","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.90","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.32","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.0.9","status":"unaffected","lessThanOrEqual":"7.0.*","versionType":"semver"},{"version":"7.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/spi/spi-mpc52xx.c"]}],"references":["https://git.kernel.org/stable/c/b25eb3d24d03e571f09c04a0522c798ea35e48a1","https://git.kernel.org/stable/c/dd74a790818ebb9a2be3a94ac935a374755cd278","https://git.kernel.org/stable/c/8b49b6aadd0c622ca7d68b4a53ae10362e221cf3","https://git.kernel.org/stable/c/336d9ad7560b3baba17af06727a888040ee93390","https://git.kernel.org/stable/c/5c77f11b9b5f1ad5a704dad875260c44016ede10","https://git.kernel.org/stable/c/f62c060272b9d7423b1650b844e8e4e7b8f9f925"],"weaknesses":[],"ingestedAt":"2026-10-30T12:44:04.813Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/46xxx/CVE-2026-46241.json","commit":"db8103c5921aac81d5d90efcf3745980dafabf49","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-46241","state":"PUBLISHED","datePublished":"2026-05-28T09:41:09.145Z","dateUpdated":"2026-10-30T12:26:12.028Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-05-13T15:03:33.107Z"},"containers":{"cna":{"title":"spi: mpc52xx: fix use-after-free on registration failure","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nspi: mpc52xx: fix use-after-free on registration failure\n\nMake sure to disable and free the interrupts in case controller\nregistration fails to avoid a potential use-after-free and resource\nleak.\n\nThis issue was flagged by Sashiko when reviewing a controller\nderegistration fix."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"b25eb3d24d03e571f09c04a0522c798ea35e48a1","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"dd74a790818ebb9a2be3a94ac935a374755cd278","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"8b49b6aadd0c622ca7d68b4a53ae10362e221cf3","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"336d9ad7560b3baba17af06727a888040ee93390","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"5c77f11b9b5f1ad5a704dad875260c44016ede10","versionType":"git"},{"version":"42bbb70980f3720b0ae6da6af862af0e95a04351","status":"affected","lessThan":"f62c060272b9d7423b1650b844e8e4e7b8f9f925","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/spi/spi-mpc52xx.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.33","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.33","versionType":"semver"},{"version":"6.1.191","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.160","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.90","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.32","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.0.9","status":"unaffected","lessThanOrEqual":"7.0.*","versionType":"semver"},{"version":"7.1","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/spi/spi-mpc52xx.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/b25eb3d24d03e571f09c04a0522c798ea35e48a1"},{"url":"https://git.kernel.org/stable/c/dd74a790818ebb9a2be3a94ac935a374755cd278"},{"url":"https://git.kernel.org/stable/c/8b49b6aadd0c622ca7d68b4a53ae10362e221cf3"},{"url":"https://git.kernel.org/stable/c/336d9ad7560b3baba17af06727a888040ee93390"},{"url":"https://git.kernel.org/stable/c/5c77f11b9b5f1ad5a704dad875260c44016ede10"},{"url":"https://git.kernel.org/stable/c/f62c060272b9d7423b1650b844e8e4e7b8f9f925"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-10-30T12:26:12.028Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"6.1.191"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"6.6.160"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"6.12.90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"6.18.32"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"7.0.9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.33","versionEndExcluding":"7.1"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}