CVE-2026-23068

linux: In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe erro...

CVE-2026-23068 is fixed in 16 products on 1 platform, first by DEBIAN-CVE-2026-23068, released February 4, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0016
4th percentile

In the Linux kernel, the following vulnerability has been resolved: spi: spi-sprd-adi: Fix double free in probe error path The driver currently uses spi_alloc_host() to allocate the controller but registers it using devm_spi_register_controller(). If devm_register_restart_handler() fails, the code jumps to the put_ctlr label and calls spi_controller_put(). However, since the controller was registered via a devm function, the device core will automatically call spi_controller_put() again when the probe fails. This results in a double-free of the spi_controller structure. Fix this by switching to devm_spi_alloc_host() and removing the manual spi_controller_put() call.

Where it's fixed

ProductFixed inFixReleased
Linux
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-64kb · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-64kb · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-azure · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-default · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-default · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.27.1.160000.2.8 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.34.1.150700.17.23.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-default-base · sles 16.0 6.12.0-160000.27.1.160000.2.8 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-docs · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-kvmsmall · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-livepatch-SLE15-SP7-RT_Update_10 · sles 15.7 1-150700.1.3.1 SUSE-SU-2026:0962-1 Mar 23, 2026
kernel-livepatch-SLE15-SP7_Update_10 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-obs-qa · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-source · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-source · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-syms · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.34.1 SUSE-SU-2026:1081-1 Mar 26, 2026
kernel-zfcpdump · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
linux · Debian 12.15 (bookworm) 6.1.162-1 DEBIAN-CVE-2026-23068 Feb 4, 2026
linux · Debian 13.5 (trixie) 6.12.69-1 DEBIAN-CVE-2026-23068 Feb 4, 2026
linux · Debian 14 6.18.8-1 DEBIAN-CVE-2026-23068 Feb 4, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.