CVE-2026-31489
HIGH EPSS 2.9%
Published Apr 22, 20262mo ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
Published Apr 22, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the controller with devm_spi_register_controller(), so teardown already drops the controller reference via devm cleanup. Calling spi_controller_put() again in meson_spicc_remove() causes a double-put.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
2.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-415
Affected Products 16
| Vendor | Product | Version | Range |
|---|---|---|---|
| linux | linux_kernel | * | ≥4.14.244 – <4.15 |
| linux | linux_kernel | * | ≥4.19.203 – <4.20 |
| linux | linux_kernel | * | ≥5.4.140 – <5.5 |
| linux | linux_kernel | * | ≥5.10.58 – <5.11 |
| linux | linux_kernel | * | ≥5.13.10 – <5.14 |
| linux | linux_kernel | * | ≥5.14.1 – <6.12.80 |
| linux | linux_kernel | * | ≥6.13 – <6.18.21 |
| linux | linux_kernel | * | ≥6.19 – <6.19.11 |
| linux | linux_kernel | 5.14 | any |
| linux | linux_kernel | 7.0 | any |
| linux | linux_kernel | 7.0 | any |
| linux | linux_kernel | 7.0 | any |
| linux | linux_kernel | 7.0 | any |
| linux | linux_kernel | 7.0 | any |
| linux | linux_kernel | 7.0 | any |
| linux | linux_kernel | 7.0 | any |
References 7
- git.kernel.org https://git.kernel.org/stable/c/0d645c6d13fa0597935d3d16b09a7ba5d24ed284
- git.kernel.org https://git.kernel.org/stable/c/40ad0334c17b23d8b66b1082ad1478a6202e90e2
- git.kernel.org https://git.kernel.org/stable/c/63542bb402b7013171c9f621c28b609eda4dbf1f
- git.kernel.org https://git.kernel.org/stable/c/7434c64ddae88a02e7fb478bc256cc100d48d3e3
- git.kernel.org https://git.kernel.org/stable/c/9b812ceb75a6260c17c91db4b9e74ead8cfa06f5
- git.kernel.org https://git.kernel.org/stable/c/d61bcec3aec6f0244a9b963e0c76c00f771d49b6
- git.kernel.org https://git.kernel.org/stable/c/da06a104f0486355073ff0d1bcb1fcbebb7080d6
Remediation
- git.kernel.org https://git.kernel.org/stable/c/40ad0334c17b23d8b66b1082ad1478a6202e90e2
- git.kernel.org https://git.kernel.org/stable/c/63542bb402b7013171c9f621c28b609eda4dbf1f
- git.kernel.org https://git.kernel.org/stable/c/9b812ceb75a6260c17c91db4b9e74ead8cfa06f5
- git.kernel.org https://git.kernel.org/stable/c/da06a104f0486355073ff0d1bcb1fcbebb7080d6