CVE-2026-43460: spi: rockchip-sfc: Fix double-free in remove() callback
In the Linux kernel, the following vulnerability has been resolved:
spi: rockchip-sfc: Fix double-free in remove() callback
The driver uses devmspiregistercontroller() for registration, which automatically unregisters the controller via devm cleanup when the device is removed. The manual call to spiunregistercontroller() in the remove() callback can lead to a double-free.
And to make sure controller is unregistered before DMA buffer is unmapped, switch to use spiregistercontroller() in probe().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43460?
CVE-2026-43460 has a high severity rating due to the potential for a double-free vulnerability in the Linux kernel's spi/rockchip-sfc driver.
How do I fix CVE-2026-43460?
To fix CVE-2026-43460, update the Linux kernel to the latest version where the vulnerability has been patched.
What impact does CVE-2026-43460 have on systems?
The CVE-2026-43460 vulnerability can lead to system instability or unexpected behaviors due to double-free issues.
Which systems are affected by CVE-2026-43460?
CVE-2026-43460 affects systems running the Linux kernel with the spi/rockchip-sfc driver.
Is there a workaround for CVE-2026-43460?
Currently, the best course of action for CVE-2026-43460 is to apply the official kernel update, as no specific workaround is available.