High 7.8Published May 28, 2026

CVE-2026-46219spi: mpc52xx: fix use-after-free on unbind

Updated under an hour ago (Oct 27, 2026, 6:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on unbind The state machine work is scheduled by the interrupt handler and therefore needs to be cancelled after disabling interrupts to avoid a potential use-after-free.

CVSS: 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e0c6ce8424095c2da32a063d3fc027494c689817 before ac8316c896c79f32c1d0a38cb41fd2b14cf8112e; from cd5106c77d6d6828aa82449f01f4eb436d602a21 before ed929d40963073f23cfb50219ccbcc6e0c3ea641; from 373d55a47dc662e5e30d12ad5d334312f757c1f1 before 0944b20e9dfa2917bd70eb5b301cbb67fe54a718; from f65d85bc1ffd8a2c194bb2cd65e35ed3648ddd59 before bb6b50f709c5a01906ff72a07fdc070bb3357188; from 90b72189de2cddacb26250579da0510b29a8b82b before ee52da0dd83ebcd89ecbbe2660c57b15a25489f2; 984836621aad98802d92c4a3047114cf518074c8 builds before 6c3e413919a12627d04a31a4a5fccb9fc129bb02; from 984836621aad98802d92c4a3047114cf518074c8 before bbcd6dd8e9f264440eaf6167382bf404911c1c46; 984836621aad98802d92c4a3047114cf518074c8 builds before 706b3dc2ac7a998c55e14b3fd2e8f934c367e6e0; and 7 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 5.4.287 before 5.5; from 5.10.231 before 5.10.258; from 5.15.174 before 5.15.209; from 6.1.120 before 6.1.175; from 6.6.66 before 6.6.140; from 6.12.5 before 6.12.90; from 6.13.1 before 6.18.32; from 6.19 before 7.0.9; and 7 more ranges	NVD

References

References

https://git.kernel.org/stable/c/ac8316c896c79f32c1d0a38cb41fd2b14cf8112e	patch
https://git.kernel.org/stable/c/ed929d40963073f23cfb50219ccbcc6e0c3ea641	patch
https://git.kernel.org/stable/c/0944b20e9dfa2917bd70eb5b301cbb67fe54a718	patch
https://git.kernel.org/stable/c/bb6b50f709c5a01906ff72a07fdc070bb3357188	patch
https://git.kernel.org/stable/c/ee52da0dd83ebcd89ecbbe2660c57b15a25489f2	patch
https://git.kernel.org/stable/c/6c3e413919a12627d04a31a4a5fccb9fc129bb02	patch
https://git.kernel.org/stable/c/bbcd6dd8e9f264440eaf6167382bf404911c1c46	patch
https://git.kernel.org/stable/c/706b3dc2ac7a998c55e14b3fd2e8f934c367e6e0	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.