CVE-2026-31489
medium
Red Hat Published: April 22, 2026 (22 days ago)
Last Modified: April 22, 2026
Vendor: Red Hat
Source: REDHAT
Vulnerability Report
Generated by CyberWatcher
Description
A flaw was found in the Linux kernel's meson-spicc Serial Peripheral Interface (SPI) controller driver. This vulnerability occurs due to a double-put operation when removing the controller, where the spi_controller_put() function is called redundantly. This can lead to memory corruption, potentially causing a system crash and resulting in a Denial of Service (DoS).
CWE
CWE-1341Affected Products
Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9