CVE-2026-46241CWE-416

CVE-2026-46241

High · published May 28, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

spi: mpc52xx: fix use-after-free on registration failure

Make sure to disable and free the interrupts in case controller

registration fails to avoid a potential use-after-free and resource

leak.

This issue was flagged by Sashiko when reviewing a controller

deregistration fix.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.1th percentile
Weakness
CWE-416 · Use After Free
Published
2026-05-28T14:16Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.33, < 6.12.906.12.90
linux/linux_kernel≥ 6.13, < 6.18.326.18.32
linux/linux_kernel≥ 6.19, < 7.0.97.0.9
References (5)
EPSS history
Timeline
  • 28 MAY 09:41Z
    spi: mpc52xx: fix use-after-free on registration failure
    cvelistv5