CVE-2025-39893
Published: Oct 1, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remains registered both when the spi_register_controller() function returns with an error and also on device removal. Change the qcom_spi_probe() function to unregister the engine on the error path, and add the missing unregistering call to qcom_spi_remove() to avoid possible use-after-free issues.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 7304d1909080ef0c9da703500a97f46c98393fcd - < e4de48e66af17547727bb2e4b1867952817edff7affected 7304d1909080ef0c9da703500a97f46c98393fcd - < 1991a458528588ff34e98b6365362560d208710f |
Linux | Linux | affected 6.15unaffected 0 - < 6.15unaffected 6.16.6 - <= 6.16.*unaffected 6.17 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now