CVE-2026-90433

A flaw was found in the Linux kernel's spi: oc-tiny driver. This vulnerability arises from a timing issue where the system attempts to free memory associated with a Serial Peripheral Interface (SPI) controller before ensuring that all related interrupt handling has ceased. This can lead to a use-after-free condition, allowing a late or latched interrupt to access memory that has already been released. Such an event can result in memory corruption and potentially cause a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.