CVE-2026-23431

MEDIUM

spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() In aml_spisg_probe(), ctlr is allocated by spi_alloc_target()/spi_alloc_host(), but fails to call spi_controller_put() in several error paths. This leads to a memory leak whenever the driver fails to probe after the initial allocation. Convert to use devm_spi_alloc_host()/devm_spi_alloc_target() to fix the memory leak.

Scores

CVSS v3 5.5
EPSS 0.0001
EPSS Percentile 2.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-401
Status published
Products (12)
Linux/Linux < 6.17
Linux/Linux 6.17
Linux/Linux 6.18.20 - 6.18.*
Linux/Linux 6.19.10 - 6.19.*
Linux/Linux 7.0
Linux/Linux 7.0-rc5
Linux/Linux cef9991e04aed3305c61c392e880f6e01a0c2ea4 - 8e28a01b69f7ea8df7ceb15470cfe643b2828f4f
Linux/Linux cef9991e04aed3305c61c392e880f6e01a0c2ea4 - b8db9552997924b750e727a625a30eaa4603bbb9
Linux/Linux cef9991e04aed3305c61c392e880f6e01a0c2ea4 - bec21d97c968a4806939eb2946df49ea6c341bde
linux/linux_kernel 6.17
... and 2 more
Published Apr 03, 2026
Tracked Since Apr 03, 2026