CVE-2026-46228
kernel: spi: ch341: fix devres lifetime
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 28, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel, specifically within the spi: ch341 driver. This vulnerability arises from incorrect management of device resources (devres) lifetime. When a Universal Serial Bus (USB) driver is unbound, the associated resources are not properly released, which can lead to memory leaks. This issue can occur during scenarios such as probe deferral or configuration changes, potentially impacting system stability and performance.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime