CVE Database›Document archive›CVE-2026-46228

CVE-2026-46228

kernel: spi: ch341: fix devres lifetime

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel, specifically within the spi: ch341 driver. This vulnerability arises from incorrect management of device resources (devres) lifetime. When a Universal Serial Bus (USB) driver is unbound, the associated resources are not properly released, which can lead to memory leaks. This issue can occur during scenarios such as probe deferral or configuration changes, potentially impacting system stability and performance.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime