What’s Vulnerable › Vulnerabilities

CVE-2026-46083: spi: fix resource leaks on device setup failure

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-27 · updated 2026-10-15
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cleanup() if spi_setup() fails while registering a device to avoid leaking any resources allocated by setup().

Affected products

• Linux kernel: from 5.4.126 before 5.5; from 5.10.44 before 5.11; from 5.12.11 before 5.13; from 5.13.1 before 6.1.176; from 6.2 before 6.6.140; from 6.7 before 6.12.86 — fixed in 5.11, 5.13, 5.5, 6.1.176, 6.12.86, 6.18.27

How to fix

Upgrade to a fixed version: Linux kernel 5.11, 5.13, 5.5, 6.1.176. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/11baa8b24bcb07ae2048f2566a220021d766abe0
• https://git.kernel.org/stable/c/1e774294b2f944f59e03a04eb438768a4b93c3ce
• https://git.kernel.org/stable/c/a2c817c629430fbbd54273525b472dac96e2c8fd
• https://git.kernel.org/stable/c/db357034f7e0cf23f233f414a8508312dfe8fbbe
• https://git.kernel.org/stable/c/dbcead54b12468d9aa54c0e1f0042d838ec3b0ae
• https://git.kernel.org/stable/c/e0401de43dac00f3e4841ca2aeb98bc10a4c5f13
• https://cert-portal.siemens.com/productcert/html/ssa-784472.html

Get alerted when CVE-2026-46083 or the next vulnerability affects your stack