CVE-2026-63861: spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback
In the Linux kernel, the following vulnerability has been resolved:
spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback
mtksnandprobe() registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action after successful registration so nandeccunregisteronhosthwengine() runs automatically on probe failures and during device removal.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63861?
CVE-2026-63861 has a risk level of 21.
How do I fix CVE-2026-63861?
To fix CVE-2026-63861, ensure that the ECC engine is unregistered properly during probe failure and the remove() callback.
What systems are affected by CVE-2026-63861?
CVE-2026-63861 affects systems using the Linux kernel with the mtk-snfi driver.
What are the potential impacts of CVE-2026-63861?
CVE-2026-63861 may lead to improper handling of ECC engines, resulting in instability or crashes.
When was CVE-2026-63861 published?
CVE-2026-63861 was published on July 19, 2026.