CyberRota Analysis
AI-GeneratedA use-after-free vulnerability exists in the Linux kernel's SPI controller driver, specifically in the atcspi200 module, which can be exploited when the driver is unbound while DMA transfers are still active. This flaw could lead to potential data corruption or system instability as the DMA resources are improperly managed. Organizations using affected Linux systems, particularly those relying on the atcspi200 driver for SPI communications, should prioritize applying the necessary patches to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still alive and triggers DMA transfers.