0.0
NA
CVE-2026-46301
spi: topcliff-pch: fix use-after-free on unbind
Description

In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind

INFO

Published Date :

June 8, 2026, 5:16 p.m.

Last Modified :

June 8, 2026, 5:16 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2026-46301 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

No affected product recoded yet

Solution
Apply kernel patches to fix use-after-free by flushing DMA buffers.
  • Update the Linux kernel to include the fix.
  • Ensure DMA buffers are flushed on driver unbind.
  • Test the driver for proper unbind behavior.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-46301 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-46301 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-46301 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-46301 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jun. 08, 2026

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind
    Added Reference https://git.kernel.org/stable/c/0e8e57f9737ea257634db1d152fc430a0788a3e1
    Added Reference https://git.kernel.org/stable/c/36e58c436d2c2a797800427dc04d74ffd8b6ce1c
    Added Reference https://git.kernel.org/stable/c/43334836b907adc21eab3079d2e6b26754468786
    Added Reference https://git.kernel.org/stable/c/4ca90deeca1c7dd72c1c380ba8143565516def2d
    Added Reference https://git.kernel.org/stable/c/8822980668c96b5aa251c1e2daec1873262b8f3f
    Added Reference https://git.kernel.org/stable/c/9d72732fe70c11424bc90ed466c7ccfa58b42a9a
    Added Reference https://git.kernel.org/stable/c/d50ef3553acbacce6f2843304d41d06dca358bb6
    Added Reference https://git.kernel.org/stable/c/d79e92161b65832e0b8cad5f3d84d17e5cd7a970
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.