Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-74415

spi: atcspi200: fix use-after-free when driver unbind

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still alive and triggers DMA transfers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 34e3815ea4597131d4324a4aa243d2201e672005 to < af6a34c41683067a314d2b58b39edecb2e5e4ac6affected
  • 34e3815ea4597131d4324a4aa243d2201e672005 to < 565bdf45125a05aa8f622f58f598283f46ba43f4affected

Linux Linux

Default version status: affected

  • 7.0affected
  • 0 to < 7.0unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References