Threats tagged 'ghsa-j436-5fx7-7xpm'

A use-after-free vulnerability in the Linux kernel's davinci SPI controller driver was fixed by switching to managed controller allocation. The issue arises because the controller is freed before the interrupt handler is fully released, allowing a late interrupt to access freed memory. The fix involves using devm_spi_alloc_host() to ensure proper release order and explicitly draining interrupts before disabling the controller.