PT-2026-30126 · Amlogic+1 · Aml Spisg Spi Driver+1

CVE-2026-23431

·

Published

2026-03-15

·

Updated

2026-04-14

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak exists in the aml spisg probe() function within the amlogic-spisg SPI driver. The ctlr variable, allocated by spi alloc target()/spi alloc host(), is not properly released via spi controller put() in several error scenarios during driver probing. This results in a memory leak whenever the driver fails to probe after initial allocation.
Recommendations Utilize devm spi alloc host()/devm spi alloc target() to resolve the memory leak.

Exploit

Fix

Missing Release of Resource after Effective Lifetime

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12491
CVE-2026-23431

Affected Products

Linux Kernel
Aml Spisg Spi Driver