Use-After-Free Vulnerability in Linux Kernel Affecting Multiple Products

CVE-2026-46219

What is CVE-2026-46219?

A vulnerability in the Linux kernel's spi: mpc52xx component has been identified, which involves a use-after-free scenario during the unbind process. The issue arises when the state machine work, scheduled by the interrupt handler, is not properly canceled after interrupts are disabled, potentially leading to memory corruption or unexpected behavior. Users are advised to apply security patches to mitigate this risk.

References