CVE-2026-46083: spi: fix resource leaks on device setup failure
Published May 27, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
spi: fix resource leaks on device setup failure
Make sure to call controller cleanup() if spisetup() fails while registering a device to avoid leaking any resources allocated by setup().
Affected Software
15 affected componentsFixes available
Linux Linux kernel (SPI subsystem)
Linux Linux kernel>=5.4.126<5.5
Linux Linux kernel>=5.10.44<5.11
Linux Linux kernel>=5.12.11<5.13
Linux Linux kernel>=5.13.1<6.1.176
Linux Linux kernel>=6.2<6.6.140
Linux Linux kernel>=6.7<6.12.86
Linux Linux kernel>=6.13<6.18.27
Linux Linux kernel>=6.19<7.0.4
Linux Linux kernel=5.13
Linux Linux kernel=5.13-rc4
Linux Linux kernel=5.13-rc5
Linux Linux kernel=5.13-rc6
Linux Linux kernel=5.13-rc7
Microsoft azl3 kernel 6.6.139.1-1<6.6.141.1-1
6.6.141.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
May 27, 2026
CVE Published
via MITRE·12:58 PM
Data Sourced
via MITRE·12:58 PM
Description
Data Sourced
via NVD·02:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 28, 2026
Data Sourced
via Microsoft·08:10 AM
DescriptionSeverityWeaknessAffected Software