CVE-2026-46074

spi: ch341: fix memory leaks on probe failures

published May 27, 2026

CVSS
—
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

spi: ch341: fix memory leaks on probe failures

Make sure to deregister the controller, disable pins, and kill and free

the RX URB on probe failures to mirror disconnect and avoid memory

leaks and use-after-free.

Also add an explicit URB kill on disconnect for symmetry (even if that

is not strictly required as USB core would have stopped it in the

current setup).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Published
2026-05-27T12:58Z
EPSS history
Timeline
  • 27 MAY 12:58Z
    spi: ch341: fix memory leaks on probe failures
    cvelistv5