CVE-2026-43460
Description
A flaw was found in the Linux kernel's rockchip-sfc driver. This vulnerability occurs because the driver attempts to unregister a Serial Peripheral Interface (SPI) controller twice during device removal. This double-free operation can lead to memory corruption, which may allow a local attacker to cause a system crash (denial of service) or potentially execute unauthorized code.
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: DoS: Crash, Exit, or Restart
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
