CVE-2026-23431
MEDIUMspi: amlogic-spisg: Fix memory leak in aml_spisg_probe()
Title source: cnaDescription
In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_probe(), ctlr is allocated by spi_alloc_target()/spi_alloc_host(), but fails to call spi_controller_put() in several error paths. This leads to a memory leak whenever the driver fails to probe after the initial allocation. Convert to use devm_spi_alloc_host()/devm_spi_alloc_target() to fix the memory leak.
Scores
CVSS v3
5.5
EPSS
0.0001
EPSS Percentile
2.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-401
Status
published
Products (12)
Linux/Linux
< 6.17
Linux/Linux
6.17
Linux/Linux
6.18.20 - 6.18.*
Linux/Linux
6.19.10 - 6.19.*
Linux/Linux
7.0
Linux/Linux
7.0-rc5
Linux/Linux
cef9991e04aed3305c61c392e880f6e01a0c2ea4 - 8e28a01b69f7ea8df7ceb15470cfe643b2828f4f
Linux/Linux
cef9991e04aed3305c61c392e880f6e01a0c2ea4 - b8db9552997924b750e727a625a30eaa4603bbb9
Linux/Linux
cef9991e04aed3305c61c392e880f6e01a0c2ea4 - bec21d97c968a4806939eb2946df49ea6c341bde
linux/linux_kernel
6.17
... and 2 more
Published
Apr 03, 2026
Tracked Since
Apr 03, 2026