CVE-2026-46083

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: fix resource leaks on device setup failure

Make sure to call controller cleanup() if spi_setup() fails while registering a device to avoid leaking any resources allocated by setup().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= c7299fea67696db5bd09d924d1f1080d894f92ef, < e0401de43dac00f3e4841ca2aeb98bc10a4c5f13; >= c7299fea67696db5bd09d924d1f1080d894f92ef, < a2c817c629430fbbd54273525b472dac96e2c8fd; >= c7299fea67696db5bd09d924d1f1080d894f92ef, < 1e774294b2f944f59e03a04eb438768a4b93c3ce; >= c7299fea67696db5bd09d924d1f1080d894f92ef, < 11baa8b24bcb07ae2048f2566a220021d766abe0; >= c7299fea67696db5bd09d924d1f1080d894f92ef, < dbcead54b12468d9aa54c0e1f0042d838ec3b0ae; >= c7299fea67696db5bd09d924d1f1080d894f92ef, < db357034f7e0cf23f233f414a8508312dfe8fbbe; 3e7c190475d98099231ee8ae486d31b1e2e7535a; 4b8b7bc3a726268e5c15d9bafe27863a85fdfc8e; e92ac9263b06c39f05526ad15c90d228cdab60fd; >= 5.4.126, < 5.5; >= 5.10.44, < 5.11; >= 5.12.11, < 5.13
LinuxLinux5.13
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *

References

Timeline

Published
May 27, 2026
Last modified
Nov 6, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-460847.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: Disable RX steering on RSS QP destroy When an RSS QP is CVE-2026-460857.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxkad crypto unalignment handling Fix handling of a packet CVE-2026-460865.5In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB enCVE-2026-460875.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_sCVE-2026-460885.5In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_eCVE-2026-460895.5In the Linux kernel, the following vulnerability has been resolved: zram: do not forget to endio for partial discard requests As reported CVE-2026-46097.1The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized access due to a missing capabilitCVE-2026-460907.8In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_cCVE-2026-460915.5In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: heed coherency rules In a control request, theCVE-2026-460925.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: check for PCI upstream bridge existence pci_upstream_bridCVE-2026-460937.8In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker decay_va_pool_node() can CVE-2026-460947.1In the Linux kernel, the following vulnerability has been resolved: ext4: fix bounds check in check_xattrs() to prevent out-of-bounds acces