CVE-2026-46074: spi: ch341: fix memory leaks on probe failures
In the Linux kernel, the following vulnerability has been resolved:
spi: ch341: fix memory leaks on probe failures
Make sure to deregister the controller, disable pins, and kill and free the RX URB on probe failures to mirror disconnect and avoid memory leaks and use-after-free.
Also add an explicit URB kill on disconnect for symmetry (even if that is not strictly required as USB core would have stopped it in the current setup).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the driver deregisters the controller, disables pins, and kills and frees the RX URB on probe failures to prevent memory leaks and use-after-free.
spi: ch341 driver deregister_controller_and_disable_pins_on_probe_failure = true - Configuration
Add an explicit kill of the RX URB on disconnect (mirror probe-failure behavior) to avoid leaks even if USB core would otherwise stop it.
spi: ch341 driver kill_RX_URB_on_disconnect = true
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46074?
The severity of CVE-2026-46074 is medium with a CVSS score of 5.5.
How do I fix CVE-2026-46074?
To fix CVE-2026-46074, ensure to deregister the controller, disable pins, and properly free the RX URB on probe failures.
What type of vulnerability is CVE-2026-46074?
CVE-2026-46074 is categorized as a Use After Free vulnerability.
Which software is affected by CVE-2026-46074?
CVE-2026-46074 affects the Linux kernel, specifically the spi: ch341 driver.
What can happen if CVE-2026-46074 is exploited?
If exploited, CVE-2026-46074 can lead to memory leaks and potential system instability.