PT-2026-30126 · Amlogic+1 · Aml Spisg Spi Driver+1
CVE-2026-23431
·
Published
2026-03-15
·
Updated
2026-04-14
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A memory leak exists in the
aml spisg probe() function within the amlogic-spisg SPI driver. The ctlr variable, allocated by spi alloc target()/spi alloc host(), is not properly released via spi controller put() in several error scenarios during driver probing. This results in a memory leak whenever the driver fails to probe after initial allocation.Recommendations
Utilize
devm spi alloc host()/devm spi alloc target() to resolve the memory leak.Exploit
Fix
Missing Release of Resource after Effective Lifetime
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Aml Spisg Spi Driver