PatchSiren cyber security CVE debrief

CVE-2026-46219 Linux CVE debrief

A use-after-free vulnerability exists in the Freescale MPC52xx SPI driver within the Linux kernel. The issue occurs during driver unbind operations when the state machine work, scheduled by the interrupt handler, is not properly cancelled after interrupts are disabled. This timing window allows the work to execute after the driver data structures have been freed, leading to memory corruption. The vulnerability affects systems utilizing the MPC52xx SPI controller, commonly found in embedded PowerPC platforms. Multiple stable kernel branches have received patches to address this race condition by ensuring proper work cancellation ordering.

Vendor: Linux
Product: Unknown
CVSS: HIGH 7.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-05-28
Original CVE updated: 2026-06-10
Advisory published: 2026-05-28
Advisory updated: 2026-06-10

Who should care

Organizations running embedded Linux systems with Freescale/NXP MPC52xx PowerPC processors utilizing SPI interfaces; industrial control system operators; automotive ECU manufacturers; telecommunications equipment vendors with legacy PowerPC-based hardware

Technical summary

The MPC52xx SPI driver in the Linux kernel contains a use-after-free vulnerability triggered during driver unbind. The driver's state machine work is scheduled via interrupt handler; if the work is not cancelled after interrupts are disabled but before driver data is freed, the scheduled work may execute against freed memory. The resolution ensures proper cancellation ordering: disable interrupts first, then cancel pending work, preventing the race window.

Defensive priority

medium

Recommended defensive actions

Apply kernel updates from distribution vendors once patches are available
Monitor stable kernel releases for MPC52xx SPI driver fixes
Review custom kernel builds for inclusion of the referenced commits
Validate SPI driver unload procedures in embedded deployments using MPC52xx hardware

Evidence notes

The vulnerability description indicates a classic race condition in kernel driver teardown. The fix involves cancelling scheduled work after interrupt disablement to prevent use-after-free. Five kernel.org stable branch commits are referenced, suggesting backports to multiple maintained kernel versions. No CVSS score has been assigned by NVD as of the modified date.

Sources and references

Verified primary and authoritative sources

CVE-2026-46219 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-46219

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-46219 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46219

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://git.kernel.org/stable/c/6c3e413919a12627d04a31a4a5fccb9fc129bb02

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Source reference
Unverified legacy reference

URL: https://git.kernel.org/stable/c/706b3dc2ac7a998c55e14b3fd2e8f934c367e6e0

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Source reference
Unverified legacy reference

URL: https://git.kernel.org/stable/c/bb6b50f709c5a01906ff72a07fdc070bb3357188

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Source reference
Unverified legacy reference

URL: https://git.kernel.org/stable/c/bbcd6dd8e9f264440eaf6167382bf404911c1c46

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Source reference
Unverified legacy reference

URL: https://git.kernel.org/stable/c/ee52da0dd83ebcd89ecbbe2660c57b15a25489f2

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.