PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-46296 Linux CVE debrief

A vulnerability was found in the Linux kernel, specifically in the spi: s3c64xx driver. The issue arises from a change that moved DMA channel allocation from the probe() function back to s3c64xx_spi_prepare_transfer(), but failed to remove the corresponding deallocation from the remove() function. This results in a NULL-pointer dereference when the driver is unbound.

Vendor
Linux
Product
Unknown
CVSS
MEDIUM 5.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-08
Original CVE updated
2026-07-23
Advisory published
2026-06-08
Advisory updated
2026-07-23

Who should care

Users of the Linux kernel with the spi: s3c64xx driver

Technical summary

The vulnerability is caused by a change in the DMA channel allocation and deallocation in the spi: s3c64xx driver. The allocation was moved from probe() to s3c64xx_spi_prepare_transfer(), but the deallocation was not removed from remove(). This leads to a NULL-pointer dereference when the driver is unbound.

Defensive priority

Medium

Recommended defensive actions

  • Update the Linux kernel to the latest version
  • Apply the patch to fix the vulnerability

Evidence notes

The issue was flagged by Sashiko when reviewing a controller deregistration fix.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-46296 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-46296

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-46296 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-46296

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/1108b8722b9ff0cdd3e8aa18d98244fcd93b6760

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/1b66f16a571a10ba8889ac471755c8af9c5b9266

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/22788b1a8611380b141e09a8896702e32d164238

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/323a258f4b1916b5a3098618e036e033b2f2317f

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/45daacbead8a009844bd5dba6cfa731332184d17

    416baaa9-dc9f-4396-8d5f-8c081fb06d67

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.