SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63861

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of the mtk-snfi driver, specifically in the registration and cleanup of the on-host NAND ECC engine. If the probe fails or the device is removed, the lack of proper teardown can lead to resource leaks or potential system instability. System administrators and developers working with Linux kernel versions that include this driver should prioritize applying the fix to ensure system reliability and prevent potential exploitation.

CVE
CVE-2026-63861
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback mtk_snand_probe() registers the on-host NAND ECC engine, but teardown was missing from both probe unwind and remove-time cleanup. Add a devm cleanup action after successful registration so nand_ecc_unregister_on_host_hw_engine() runs automatically on probe failures and during device removal.