CVE-2026-46225

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-28 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: spi: rspi: fix controller deregistration Make sure to deregister the controller before releasing underlying resources like DMA during driver unbind.

Affected Software (8)

VendorProductVersion
Linux Linux 9e03d05eee4ca45ed12749ef6c26bf616262cdd2 < 434804ab2089f1671a718b2af9f94a3b8f9f9b49
Linux Linux 9e03d05eee4ca45ed12749ef6c26bf616262cdd2 < 77defd64b405b680db73d767313fce770d368368
Linux Linux 9e03d05eee4ca45ed12749ef6c26bf616262cdd2 < c5090db1b31de3ef4db0cda7e822ab49cb572292
Linux Linux 9e03d05eee4ca45ed12749ef6c26bf616262cdd2 < aee76c1dd189562c6678313caec12761f78a9ef3
Linux Linux 9e03d05eee4ca45ed12749ef6c26bf616262cdd2 < fee6abd9845c3edd217b0e429d09f764f9a5690e
Linux Linux 9e03d05eee4ca45ed12749ef6c26bf616262cdd2 < 9944fa6726afb1e6eb7e2212764e7da0c97f2dcc
Linux Linux 3.14
linux linux_kernel 3.14 – 6.6.140

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.12%
Raw Score 0.001190
Percentile 1.8%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00119
2026-10-31
0.00119
2026-10-30
0.00119
2026-10-29
0.00119

Intelligence Sources

mitre ref →
nvd ref →