CVE-2026-46301
In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chan
CVSS
7.8
High
EPSS
0.1%
p2
KEV
—
Exploit Today
0
0-100
Published: Jun 8, 2026 · Last modified: Jul 23, 2026 · CWE-416
0.1%EPSS · 30 days0.2%
2026-10-052026-11-01
In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Give the driver a chance to flush its queue before releasing the DMA buffers on driver unbind
- git.kernel.orghttps://git.kernel.org/stable/c/0e8e57f9737ea257634db1d152fc430a0788a3e1
- git.kernel.orghttps://git.kernel.org/stable/c/36e58c436d2c2a797800427dc04d74ffd8b6ce1c
- git.kernel.orghttps://git.kernel.org/stable/c/43334836b907adc21eab3079d2e6b26754468786
- git.kernel.orghttps://git.kernel.org/stable/c/4ca90deeca1c7dd72c1c380ba8143565516def2d
- git.kernel.orghttps://git.kernel.org/stable/c/8822980668c96b5aa251c1e2daec1873262b8f3f
- git.kernel.orghttps://git.kernel.org/stable/c/9d72732fe70c11424bc90ed466c7ccfa58b42a9a
- git.kernel.orghttps://git.kernel.org/stable/c/d50ef3553acbacce6f2843304d41d06dca358bb6
- git.kernel.orghttps://git.kernel.org/stable/c/d79e92161b65832e0b8cad5f3d84d17e5cd7a970
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-590448.4 HIG—
———In multiple locations, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.3hCVE-2026-589848.4 HIG—
———In multiple locations, there is a possible memory corruption due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.3hCVE-2026-589428.4 HIG—
———In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.3hCVE-2026-588298.4 HIG—
———In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.3hCVE-2026-588288.4 HIG—
———In multiple functions of base.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.3hCVE-2026-588278.4 HIG—
———In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.3h