01 Record

CVE-2026-46083

spi: fix resource leaks on device setup failure

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

spi: fix resource leaks on device setup failure

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 2.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Undergoing Analysis. NVD last modified this record on 2026-10-15.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-27 12:58Z5 MO AGO

Last updated

2026-10-15 01:20Z14 DAYS AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant

Data version

5.2

Document digest

3fc901972a8d5a039b5288c41c990daf03ab44098ea916401daa1abd32b05b51

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc7299fea67696db5bd09d924d1f1080d894f92ef to < e0401de43dac00f3e4841ca2aeb98bc10a4c5f13, c7299fea67696db5bd09d924d1f1080d894f92ef to < a2c817c629430fbbd54273525b472dac96e2c8fd, c7299fea67696db5bd09d924d1f1080d894f92ef to < 1e774294b2f944f59e03a04eb438768a4b93c3ce, c7299fea67696db5bd09d924d1f1080d894f92ef to < 11baa8b24bcb07ae2048f2566a220021d766abe0, c7299fea67696db5bd09d924d1f1080d894f92ef to < dbcead54b12468d9aa54c0e1f0042d838ec3b0ae, c7299fea67696db5bd09d924d1f1080d894f92ef to < db357034f7e0cf23f233f414a8508312dfe8fbbe, 3e7c190475d98099231ee8ae486d31b1e2e7535a, 4b8b7bc3a726268e5c15d9bafe27863a85fdfc8e, e92ac9263b06c39f05526ad15c90d228cdab60fd, 5.4.126 to < 5.5, 5.10.44 to < 5.11, 5.12.11 to < 5.13, 5.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e0401de43dac00f3e4841ca2aeb98bc10a4c5f13
git.kernel.orghttps://git.kernel.org/stable/c/a2c817c629430fbbd54273525b472dac96e2c8fd
git.kernel.orghttps://git.kernel.org/stable/c/1e774294b2f944f59e03a04eb438768a4b93c3ce
git.kernel.orghttps://git.kernel.org/stable/c/11baa8b24bcb07ae2048f2566a220021d766abe0
git.kernel.orghttps://git.kernel.org/stable/c/dbcead54b12468d9aa54c0e1f0042d838ec3b0ae
git.kernel.orghttps://git.kernel.org/stable/c/db357034f7e0cf23f233f414a8508312dfe8fbbe
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-784472.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.176-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.86-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.