Use-After-Free Vulnerability in Linux Kernel Affecting MPC52xx SPI Controller
CVE-2026-46241

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
28 May 2026

What is CVE-2026-46241?

A use-after-free vulnerability has been identified in the Linux kernel related to the MPC52xx SPI controller. This issue arises during device registration failures where interrupts aren't properly disabled and released, leading to potential resource leaks and unsafe access. The problem was revealed by a review of a controller deregistration fix, necessitating a thorough check to ensure proper cleanup during the registration process. System administrators should ensure they are using patched versions of the Linux kernel to mitigate this vulnerability.

Affected Version(s)

Linux 42bbb70980f3720b0ae6da6af862af0e95a04351 < 8b49b6aadd0c622ca7d68b4a53ae10362e221cf3

Linux 42bbb70980f3720b0ae6da6af862af0e95a04351 < 336d9ad7560b3baba17af06727a888040ee93390

Linux 42bbb70980f3720b0ae6da6af862af0e95a04351 < 5c77f11b9b5f1ad5a704dad875260c44016ede10

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.