CVE-2026-46083CWE-401

CVE-2026-46083

Medium · published May 27, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

spi: fix resource leaks on device setup failure

Make sure to call controller cleanup() if spi_setup() fails while

registering a device to avoid leaking any resources allocated by

setup().

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-05-27T18:17Z
Affected products (13)
ProductVersionsFixed in
linux/linux_kernel≥ 5.4.126, < 5.55.5
linux/linux_kernel≥ 5.10.44, < 5.115.11
linux/linux_kernel≥ 5.12.11, < 5.135.13
linux/linux_kernel≥ 5.13.1, < 6.1.1766.1.176
linux/linux_kernel≥ 6.2, < 6.6.1406.6.140
linux/linux_kernel≥ 6.7, < 6.12.866.12.86
linux/linux_kernel≥ 6.13, < 6.18.276.18.27
linux/linux_kernel≥ 6.19, < 7.0.47.0.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (7)
EPSS history
Timeline
  • 27 MAY 12:58Z
    spi: fix resource leaks on device setup failure
    cvelistv5