CVE-2026-46301
kernel: spi: topcliff-pch: fix use-after-free on unbind
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 8, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's spi-topcliff-pch driver. This vulnerability, a use-after-free error, occurs when the driver attempts to release Direct Memory Access (DMA) buffers during an unbind operation without properly flushing its queue. An attacker could potentially exploit this memory corruption issue to cause a denial of service or, in some scenarios, achieve arbitrary code execution.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference