CVE-2026-90410

CVE-2026-90410 is a use-after-free vulnerability in the Linux kernel's davinci SPI driver . The root cause stems from a mismatch between the non-managed controller allocation (spi_alloc_host()) and the managed IRQ registration (devm_request_threaded_irq()). During device removal, the controller a...