VDB

CVE-2026-31389

CVE-2026-31389 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registration failure Make sure to deregister from driver core also in the unlikely event that per-cpu statistics allocation fails during controller registration to avoid use-after-free (of driver resources) and unclocked register accesses.

EPSS 0.02% · 3.6th percentile

Risk Scores

EPSS Score
0.02%
3.6th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel6.0, 6.0, 6.0
LinuxLinux6598b91b5ac32bc756d7c3000a31f775d4ead1c4, 6598b91b5ac32bc756d7c3000a31f775d4ead1c4, 6598b91b5ac32bc756d7c3000a31f775d4ead1c4

Timeline

  • Apr 3, 2026 CVE Published
  • Apr 27, 2026 CVE Updated
  • May 18, 2026 EPSS Score
  • May 19, 2026 EPSS Score
  • May 20, 2026 EPSS Score
  • May 21, 2026 EPSS Score
  • May 22, 2026 EPSS Score
  • May 23, 2026 EPSS Score
  • May 24, 2026 EPSS Score
  • May 25, 2026 EPSS Score
  • May 26, 2026 EPSS Score
  • May 27, 2026 EPSS Score

References

…and 53 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›