Acknowledged
Created: Jun 18, 2025
Updated: Sep 4, 2026
Resolved Date: Jun 19, 2025
Found In Version: 10.25.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 25
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]spi: Fix simplification of devm_spi_register_controller[EOL][EOL]This reverts commit 59ebbe40fb51 ("spi: simplify[EOL]devm_spi_register_controller").[EOL][EOL]If devm_add_action() fails in devm_add_action_or_reset(),[EOL]devm_spi_unregister() will be called, it decreases the[EOL]refcount of 'ctlr->dev' to 0, then it will cause uaf in[EOL]the drivers that calling spi_put_controller() in error path.
CREATE(Triage):(User=lchen-cn) [CVE-2022-50190 (https://nvd.nist.gov/vuln/detail/CVE-2022-50190)
