Double-Free Vulnerability in Linux Kernel Affecting Rockchip SFC Driver

CVE-2026-43460

What is CVE-2026-43460?

A vulnerability exists in the Rockchip SFC driver within the Linux kernel that can lead to a double-free condition during the device removal process. Specifically, the use of devm_spi_register_controller() for controller registration automatically manages the unregistration upon device removal. However, a simultaneous manual call to spi_unregister_controller() in the remove() callback results in potential memory management issues. The resolution involves switching to spi_register_controller() during the probe phase, ensuring proper controller handling and avoiding double-free vulnerabilities.

References