CVE-2026-74415

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still alive and triggers DMA transfers.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linuxaf6a34c41683067a314d2b58b39edecb2e5e4ac6, 565bdf45125a05aa8f622f58f598283f46ba43f4 or later

Affected products

ProductAffected versionsFixed in
Linux Linux34e3815ea4597131d4324a4aa243d2201e672005 ≤ v < af6a34c41683067a314d2b58b39edecb2e5e4ac6, 34e3815ea4597131d4324a4aa243d2201e672005 ≤ v < 565bdf45125a05aa8f622f58f598283f46ba43f4, 7.0af6a34c41683067a314d2b58b39edecb2e5e4ac6, 565bdf45125a05aa8f622f58f598283f46ba43f4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.