CVE-2026-43004

spi: stm32-ospi: Fix resource leak in remove() callback

published May 1, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

spi: stm32-ospi: Fix resource leak in remove() callback

The remove() callback returned early if pm_runtime_resume_and_get()

failed, skipping the cleanup of spi controller and other resources.

Remove the early return so cleanup completes regardless of PM resume

result.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-01T14:15Z
EPSS history
Timeline
  • 01 MAY 14:15Z
    spi: stm32-ospi: Fix resource leak in remove() callback
    cvelistv5