CVE-2026-46296: spi: s3c64xx: fix NULL-deref on driver unbind
In the Linux kernel, the following vulnerability has been resolved:
spi: s3c64xx: fix NULL-deref on driver unbind
A change moving DMA channel allocation from probe() back to s3c64xxspipreparetransfer() failed to remove the corresponding deallocation from remove().
Drop the bogus DMA channel release from remove() to avoid triggering a NULL-pointer dereference on driver unbind.
This issue was flagged by Sashiko when reviewing a controller deregistration fix.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46296?
The severity of CVE-2026-46296 is rated as 14.
What type of vulnerability is CVE-2026-46296?
CVE-2026-46296 is a NULL dereference vulnerability affecting the SPI driver in the Linux kernel.
How do I fix CVE-2026-46296?
To fix CVE-2026-46296, ensure your Linux kernel is updated to a version that incorporates the fix for this vulnerability.
Which components are affected by CVE-2026-46296?
CVE-2026-46296 specifically affects the s3c64xx SPI driver within the Linux kernel.
When was CVE-2026-46296 published?
CVE-2026-46296 was published on June 8, 2026.