Description
In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the controller with devm_spi_register_controller(), so teardown already drops the controller reference via devm cleanup. Calling spi_controller_put() again in meson_spicc_remove() causes a double-put.
References (4)
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
2.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-415
Status
published
Products (18)
Linux/Linux
< 5.14
Linux/Linux
05565b469358a9a03034f7f712d83590a9f125a4
Linux/Linux
5.14
Linux/Linux
6.12.80 - 6.12.*
Linux/Linux
6.18.21 - 6.18.*
Linux/Linux
6.19.11 - 6.19.*
Linux/Linux
683b47d0ebb10ba0d272604b09686e023d10d40c
Linux/Linux
7.0
Linux/Linux
8311ee2164c5cd1b63a601ea366f540eae89f10e - 40ad0334c17b23d8b66b1082ad1478a6202e90e2
Linux/Linux
8311ee2164c5cd1b63a601ea366f540eae89f10e - 63542bb402b7013171c9f621c28b609eda4dbf1f
... and 8 more
Published
Apr 22, 2026
Tracked Since
Apr 22, 2026