CVE-2026-72048

A flaw was found in the Linux kernel. The ieee802154: ca8210 driver fails to free allocated memory casctl when the spiasync operation encounters an error. Under sustained Serial Peripheral Interface SPI bus contention, this can lead to repeated memory leaks. This continuous resource exhaustion ma...

CVE-2026-72048

Linux kernel: ieee802154 ca8210 driver leaks cas_ctl on spi_async failure due to kzalloc_obj(GFP_ATOMIC) allocation that is only freed in the completion callback. On submission failure, spi_async() does not queue a callback, leaving cas_ctl and embedded spi_message/spi_transfer orphaned. The leak...

CVE-2026-72047

Summary: CVE-2026-72047 affects the Linux kernel, specifically the ieee802154 ca8210 driver. A 64‑bit build flaw occurs when ca8210_test_int_driver_write() and ca8210_test_int_user_read() exchange a kmalloc’d buffer pointer through a struct kfifo and pass a literal 4 as the byte count to kfifo_in...

PT-2026-72237

In the Linux kernel, the following vulnerability has been resolved: ieee802154: ca8210: fix cas ctl leak on spi async failure ca8210 spi transfer allocates cas ctl with kzalloc objGFP ATOMIC and relies entirely on the SPI completion callback ca8210 spi transfer complete to free it. The spi async...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ca8210 driver not properly validating maclen, which could result in a buffer overflow...