CVE-2026-43460

kernel: spi: rockchip-sfc: Fix double-free in remove() callback

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's rockchip-sfc driver. This vulnerability occurs because the driver attempts to unregister a Serial Peripheral Interface (SPI) controller twice during device removal. This double-free operation can lead to memory corruption, which may allow a local attacker to cause a system crash (denial of service) or potentially execute unauthorized code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1341 · Multiple Releases of Same Resource or Handle