spi: s3c64xx: fix NULL-deref on driver unbind

MITRE NVD CVE.ORG JSON API Print: PDF PDF

Summary

CVECVE-2026-46296
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-06-08 17:16:48 UTC
Updated2026-06-08 17:16:48 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A change moving DMA channel allocation from probe() back to s3c64xx_spi_prepare_transfer() failed to remove the corresponding deallocation from remove(). Drop the bogus DMA channel release from remove() to avoid triggering a NULL-pointer dereference on driver unbind. This issue was flagged by Sashiko when reviewing a controller deregistration fix.

Risk And Classification

EPSS: 0.000180000 probability, percentile 0.049930000 (date 2026-06-10)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected f52b03c707444c5a3d1a0b9c5724f93ddc3c588e 1108b8722b9ff0cdd3e8aa18d98244fcd93b6760 git Not specified
CNA Linux Linux affected f52b03c707444c5a3d1a0b9c5724f93ddc3c588e 323a258f4b1916b5a3098618e036e033b2f2317f git Not specified
CNA Linux Linux affected f52b03c707444c5a3d1a0b9c5724f93ddc3c588e 1b66f16a571a10ba8889ac471755c8af9c5b9266 git Not specified
CNA Linux Linux affected f52b03c707444c5a3d1a0b9c5724f93ddc3c588e 22788b1a8611380b141e09a8896702e32d164238 git Not specified
CNA Linux Linux affected f52b03c707444c5a3d1a0b9c5724f93ddc3c588e 45daacbead8a009844bd5dba6cfa731332184d17 git Not specified
CNA Linux Linux affected 6.0 Not specified
CNA Linux Linux unaffected 6.0 semver Not specified
CNA Linux Linux unaffected 6.6.140 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.88 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.30 6.18.* semver Not specified
CNA Linux Linux unaffected 7.0.7 7.0.* semver Not specified
CNA Linux Linux unaffected 7.1-rc1 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/323a258f4b1916b5a3098618e036e033b2f2317f 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/1108b8722b9ff0cdd3e8aa18d98244fcd93b6760 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/45daacbead8a009844bd5dba6cfa731332184d17 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/1b66f16a571a10ba8889ac471755c8af9c5b9266 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/22788b1a8611380b141e09a8896702e32d164238 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report