CVE-2026-31489
highIn the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the control…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: spi: meson-spicc: Fix double-put in remove path meson_spicc_probe() registers the controller with devm_spi_register_controller(), so teardown already drops the controller reference via devm cleanup. Calling spi_controller_put() again in meson_spicc_remove() causes a double-put.
CVSS
7.8
7.8 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-04-22 14:16
Modified: 2026-11-11 23:10
NVD status: Modified
Last synced 3 hours ago
Verified against the source API 2026-11-11 23:12 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥4.14.244 <4.15, ≥4.19.203 <4.20, ≥5.4.140 <5.5, ≥5.10.58 <5.11, ≥5.13.10 <5.14, ≥5.14.1 <6.12.80
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/40ad0334c17b23d8b66b1082ad1478a6202e90e2
Patch / mitigation: https://git.kernel.org/stable/c/63542bb402b7013171c9f621c28b609eda4dbf1f
Patch / mitigation: https://git.kernel.org/stable/c/9b812ceb75a6260c17c91db4b9e74ead8cfa06f5
Patch / mitigation: https://git.kernel.org/stable/c/da06a104f0486355073ff0d1bcb1fcbebb7080d6
References
- https://git.kernel.org/stable/c/01f5f7976c24d6e9beef6b5a410af3b9b1d4d476 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/0d645c6d13fa0597935d3d16b09a7ba5d24ed284 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/40ad0334c17b23d8b66b1082ad1478a6202e90e2 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/63542bb402b7013171c9f621c28b609eda4dbf1f 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/7434c64ddae88a02e7fb478bc256cc100d48d3e3 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/9b812ceb75a6260c17c91db4b9e74ead8cfa06f5 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/d61bcec3aec6f0244a9b963e0c76c00f771d49b6 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/da06a104f0486355073ff0d1bcb1fcbebb7080d6 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-11-11 23:12 UTC · record ↗