01 Record

CVE-2026-31489

spi: meson-spicc: Fix double-put in remove path

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

spi: meson-spicc: Fix double-put in remove path

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 3.0% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-19.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-22 13:54Z4 MO AGO

Last updated

2026-06-19 11:57Z2 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-415Double FreeVariant
CWE-1341Multiple Releases of Same Resource or HandleBase

Data version

5.2

Document digest

5427517d8868a4d46e64e4662dd2629694f3ab128789f9bd31660621c609dad0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux05565b469358a9a03034f7f712d83590a9f125a4 to < 01f5f7976c24d6e9beef6b5a410af3b9b1d4d476, 8311ee2164c5cd1b63a601ea366f540eae89f10e to < d61bcec3aec6f0244a9b963e0c76c00f771d49b6, 8311ee2164c5cd1b63a601ea366f540eae89f10e to < 7434c64ddae88a02e7fb478bc256cc100d48d3e3, 8311ee2164c5cd1b63a601ea366f540eae89f10e to < 0d645c6d13fa0597935d3d16b09a7ba5d24ed284, 8311ee2164c5cd1b63a601ea366f540eae89f10e to < 40ad0334c17b23d8b66b1082ad1478a6202e90e2, 8311ee2164c5cd1b63a601ea366f540eae89f10e to < da06a104f0486355073ff0d1bcb1fcbebb7080d6, 8311ee2164c5cd1b63a601ea366f540eae89f10e to < 9b812ceb75a6260c17c91db4b9e74ead8cfa06f5, 8311ee2164c5cd1b63a601ea366f540eae89f10e to < 63542bb402b7013171c9f621c28b609eda4dbf1f, ff056817560d72363b463ddac27822dc8c121280, 683b47d0ebb10ba0d272604b09686e023d10d40c, a5bf7ef13ebf6adf62a69ab3542d4fc0564c082e, f2ca988aba4eaad1319e80eb1316a4ba5dbd6897, 5.10.58 to < 5.10.259, 4.14.244 to < 4.15, 4.19.203 to < 4.20, 5.4.140 to < 5.5, 5.13.10 to < 5.14, 5.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/01f5f7976c24d6e9beef6b5a410af3b9b1d4d476
git.kernel.orghttps://git.kernel.org/stable/c/d61bcec3aec6f0244a9b963e0c76c00f771d49b6
git.kernel.orghttps://git.kernel.org/stable/c/7434c64ddae88a02e7fb478bc256cc100d48d3e3
git.kernel.orghttps://git.kernel.org/stable/c/0d645c6d13fa0597935d3d16b09a7ba5d24ed284
git.kernel.orghttps://git.kernel.org/stable/c/40ad0334c17b23d8b66b1082ad1478a6202e90e2
git.kernel.orghttps://git.kernel.org/stable/c/da06a104f0486355073ff0d1bcb1fcbebb7080d6
git.kernel.orghttps://git.kernel.org/stable/c/9b812ceb75a6260c17c91db4b9e74ead8cfa06f5
git.kernel.orghttps://git.kernel.org/stable/c/63542bb402b7013171c9f621c28b609eda4dbf1f

01 Record index

CVE-2026-31489

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-31489

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References