CVE-2026-46083: linux
CVSS: 5.5v3.1MediumUndergoing analysis
AliasesUBUNTU-CVE-2026-46083DEBIAN-CVE-2026-46083
Published 27-05-2026Last modified 15-10-2026
Vulnerability summary
CVE-2026-46083 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5.1% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.1 (NVD)EPSS score
0.16%
0%100%
Low · +0.04 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 32 · Related 32OPENSUSE-SU-2026:10954-1OPENSUSE-SU-2026:20965-1SUSE-SU-2026:22099-1SUSE-SU-2026:22108-1SUSE-SU-2026:22112-1SUSE-SU-2026:22117-1SUSE-SU-2026:22127-1SUSE-SU-2026:22137-1SUSE-SU-2026:22433-1SUSE-SU-2026:22458-1SUSE-SU-2026:2482-1SUSE-SU-2026:2591-1USN-8488-1USN-8488-2USN-8489-1USN-8507-1USN-8567-1USN-8569-1USN-8574-1USN-8574-2USN-8574-3USN-8595-1USN-8595-2USN-8595-3USN-8596-1USN-8603-1USN-8606-1USN-8607-1USN-8608-1USN-8609-1USN-8619-1USN-8665-1
Timeline
- 27-05-2026PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cleanup() if spi_setup() fails while registering a device to avoid leaking any resources allocated by setup().
CVSS metrics
3 scores · 3 sources · 1 versionMedium 5.5Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
+0.04 pp
From 0.12% on 21-09-2026
21-09-202621-10-2026
EPSS score0.16%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu155 products
- linuxAll versions (No fix recorded) | < 6.8.0-136.136 | < 7.0.0-27.27
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 6.8.0-1061.64 | < 7.0.0-1008.8
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ c7299fea67696db5bd09d924d1f1080d894f92ef, < e0401de43dac00f3e4841ca2aeb98bc10a4c5f13 | ≥ c7299fea67696db5bd09d924d1f1080d894f92ef, < a2c817c629430fbbd54273525b472dac96e2c8fd | ≥ c7299fea67696db5bd09d924d1f1080d894f92ef, < 1e774294b2f944f59e03a04eb438768a4b93c3ce | ≥ c7299fea67696db5bd09d924d1f1080d894f92ef, < 11baa8b24bcb07ae2048f2566a220021d766abe0 | ≥ c7299fea67696db5bd09d924d1f1080d894f92ef, < dbcead54b12468d9aa54c0e1f0042d838ec3b0ae | ≥ c7299fea67696db5bd09d924d1f1080d894f92ef, < db357034f7e0cf23f233f414a8508312dfe8fbbe | 3e7c190475d98099231ee8ae486d31b1e2e7535a | 4b8b7bc3a726268e5c15d9bafe27863a85fdfc8e | e92ac9263b06c39f05526ad15c90d228cdab60fd | ≥ 5.4.126, < 5.5 | ≥ 5.10.44, < 5.11 | ≥ 5.12.11, < 5.13 | 5.13
- linux_kernelEOL≥ 5.4.126, < 5.5 | ≥ 5.10.44, < 5.11 | ≥ 5.12.11, < 5.13 | ≥ 5.13.1, < 6.1.176 | ≥ 6.2, < 6.6.140 | ≥ 6.7, < 6.12.86 | ≥ 6.13, < 6.18.27 | ≥ 6.19, < 7.0.4 | 5.13 | 5.13:rc4 | 5.13:rc5 | 5.13:rc6 | 5.13:rc7
Debian1 product
- linux< 6.1.176-1 | < 6.12.86-1 | < 7.0.4-1
3 vendors · 158 products