In the Linux kernel, the following vulnerability has been resolved:
spi: Fix simplification of devm_spi_register_controller
This reverts commit 59ebbe40fb51 ("spi: simplify devm_spi_register_controller").
If devm_add_action() fails in devm_add_action_or_reset(), devm_spi_unregister() will be called, it decreases the refcount of 'ctlr->dev' to 0, then it will cause uaf in the drivers that calling spi_put_controller() in error path.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-gkeUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-riscv-5.15Upgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-lowlatencyUpgrade linux-aws-5.15Upgrade linux-gkeopUpgrade linux-realtimeUpgrade linux-raspiUpgrade linux-azure-5.15Upgrade linuxUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-azureUpgrade linux-azure-fdeUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15 | Jun 26, 2025 | Jun 18, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub