CVE-2026-23431
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/04/2026
Last modified:
03/04/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
spi: amlogic-spisg: Fix memory leak in aml_spisg_probe()<br />
<br />
In aml_spisg_probe(), ctlr is allocated by<br />
spi_alloc_target()/spi_alloc_host(), but fails to call<br />
spi_controller_put() in several error paths. This leads<br />
to a memory leak whenever the driver fails to probe after<br />
the initial allocation.<br />
<br />
Convert to use devm_spi_alloc_host()/devm_spi_alloc_target()<br />
to fix the memory leak.