CVE-2026-43460 Details
Description
In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-free in remove() callback The driver uses devm_spi_register_controller() for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to spi_unregister_controller() in the remove() callback can lead to a double-free. And to make sure controller is unregistered before DMA buffer is unmapped, switch to use spi_register_controller() in probe().
A double-free vulnerability has been identified in the Rockchip SPI controller driver of the Linux kernel. This issue arises because the driver improperly manages the registration and unregistration of the SPI controller. It uses 'devm_spi_register_controller()' for registration, which automatically handles unregistration when the device is removed. However, the manual call to 'spi_unregister_controller()' in the remove() callback can lead to a double-free condition. To prevent this, the driver should use 'spi_register_controller()' in the probe() function instead.
The vulnerability has been addressed in the Linux kernel by modifying the Rockchip SPI controller driver to use 'spi_register_controller()' in the probe() function, ensuring proper management of the SPI controller's lifecycle.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/111e2863372c322e836e0c896f6dd9cf4ee08c71 | kernel.org | Patch |
| https://git.kernel.org/stable/c/85fb53351e6a3b921357a2178671e847a087e400 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b6051f2bdd4bd3dde85b68558edd3a6843489221 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-415 | Double Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.14, < 6.18.19 >= 6.19, < 6.19.9 7.0 rc1 7.0 rc2 7.0 rc3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 20, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |