CVE-2026-46301

HighCVSS 7.8/10Last modified Jul 23, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

spi: topcliff-pch: fix use-after-free on unbind

Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= c37f3c2749b53225d36faa5c583203c5f12ae15b, < 43334836b907adc21eab3079d2e6b26754468786; >= c37f3c2749b53225d36faa5c583203c5f12ae15b, < 36e58c436d2c2a797800427dc04d74ffd8b6ce1c; >= c37f3c2749b53225d36faa5c583203c5f12ae15b, < 4ca90deeca1c7dd72c1c380ba8143565516def2d; >= c37f3c2749b53225d36faa5c583203c5f12ae15b, < d79e92161b65832e0b8cad5f3d84d17e5cd7a970; >= c37f3c2749b53225d36faa5c583203c5f12ae15b, < 8822980668c96b5aa251c1e2daec1873262b8f3f; >= c37f3c2749b53225d36faa5c583203c5f12ae15b, < d50ef3553acbacce6f2843304d41d06dca358bb6; >= c37f3c2749b53225d36faa5c583203c5f12ae15b, < 0e8e57f9737ea257634db1d152fc430a0788a3e1; >= c37f3c2749b53225d36faa5c583203c5f12ae15b, < 9d72732fe70c11424bc90ed466c7ccfa58b42a9a
LinuxLinux3.1

References

Timeline

Published
Jun 8, 2026
Last modified
Jul 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-463025.5In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/selinux/policy Currently therCVE-2026-463038.2In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size CVE-2026-463047.5In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free nvmet_tcp_relCVE-2026-463055.5In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_CVE-2026-463067.5In the Linux kernel, the following vulnerability has been resolved: flow_dissector: do not dissect PPPoE PFC frames RFC 2516 Section 7 staCVE-2026-463078.3In the Linux kernel, the following vulnerability has been resolved: wifi: ath5k: do not access array OOB Vincent reports: > The ath5k drivCVE-2026-463087.8In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legCVE-2026-463097.0In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madviseCVE-2026-46319.8Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sCVE-2026-463105.5In the Linux kernel, the following vulnerability has been resolved: media: renesas: vsp1: Fix NULL pointer deref on module unload When unlCVE-2026-463117.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix access to stale wptr mapping Use drm_exec to takCVE-2026-463125.5In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap vb2_dma_contig sets
CVE-2026-46301: High severity, CVSS 7.8 | Vulnix