CVE-2026-43004
kernel: spi: stm32-ospi: Fix resource leak in remove() callback
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's stm32-ospi driver. The remove() callback, which is intended to clean up resources, could exit prematurely under certain power management conditions. This issue prevents the proper release of SPI controller and other system resources, potentially leading to resource exhaustion. This could allow a local attacker to cause a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime