CVE-2026-31489

spi: meson-spicc: Fix double-put in remove path

published April 22, 2026

CVSS
—
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

spi: meson-spicc: Fix double-put in remove path

meson_spicc_probe() registers the controller with

devm_spi_register_controller(), so teardown already drops the

controller reference via devm cleanup.

Calling spi_controller_put() again in meson_spicc_remove()

causes a double-put.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2026-04-22T13:54Z
EPSS history
Timeline
  • 22 APR 13:54Z
    spi: meson-spicc: Fix double-put in remove path
    cvelistv5