CVE-2026-23068

HIGH EPSS 2.9%
Published Feb 4, 20264mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Feb 4, 2026 4mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe error path The driver currently uses spi_alloc_host() to allocate the controller but registers it using devm_spi_register_controller(). If devm_register_restart_handler() fails, the code jumps to the put_ctlr label and calls spi_controller_put(). However, since the controller was registered via a devm function, the device core will automatically call spi_controller_put() again when the probe fails. This results in a double-free of the spi_controller structure. Fix this by switching to devm_spi_alloc_host() and removing the manual spi_controller_put() call.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
2.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-415

Affected Products 10

VendorProductVersionRange
linuxlinux_kernel*≥4.17  –  <6.1.162
linuxlinux_kernel*≥6.2  –  <6.6.122
linuxlinux_kernel*≥6.7  –  <6.12.68
linuxlinux_kernel*≥6.13  –  <6.18.8
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/346775f2b4cf839177e8e86b94aa180a06dc15b0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/383d4f5cffcc8df930d95b06518a9d25a6d74aac
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/417cdfd9b9f986e95bfcb1d68eb443e6e0a15f8c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bddd3d10d039729b81cfb0804520c8832a701a0e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f6d6b3f172df118db582fe5ec43ae223a55d99cf
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/346775f2b4cf839177e8e86b94aa180a06dc15b0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/383d4f5cffcc8df930d95b06518a9d25a6d74aac
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/417cdfd9b9f986e95bfcb1d68eb443e6e0a15f8c
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bddd3d10d039729b81cfb0804520c8832a701a0e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f6d6b3f172df118db582fe5ec43ae223a55d99cf
    Patch