CVE-2026-46296

Updated on 08 Jun 2026

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

spi: s3c64xx: fix NULL-deref on driver unbind

A change moving DMA channel allocation from probe() back to s3c64xx_spi_prepare_transfer() failed to remove the corresponding deallocation from remove().

Drop the bogus DMA channel release from remove() to avoid triggering a NULL-pointer dereference on driver unbind.

This issue was flagged by Sashiko when reviewing a controller deregistration fix.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 12 Planned
Debian 13 Will Not Fix
7 kernels
  • 6.12.85-1
  • 6.12.86-1
  • 6.12.73-1
  • 6.12.63-1
  • 6.12.74-1
  • 6.12.69-1
  • 6.12.74-2
Ubuntu 24.04 Planned