CVE-2026-46200
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
A vulnerability related to the deregistration of the SPI controller in mpc52xx has been fixed in the Linux kernel. The issue was that the controller was not properly deregistered before disabling and releasing resources such as interrupts and GPIOs.
Risk Assessment
Improper deregistration of the controller may lead to unexpected system behavior, potentially affecting the stability and security of applications using this controller.
Recommendation
It is recommended to update the Linux kernel to the latest version to ensure proper management of the SPI controller and avoid potential issues related to its deregistration.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix controller deregistration Make sure to deregister the controller before disabling and releasing underlying resources like interrupts and gpios during driver unbind.