A use-after-free vulnerability in the Linux kernel spi: ti-qspi driver allows local, authenticated users to potentially escalate privileges or crash the system.

This is a use-after-free vulnerability (CWE-825) in the ti-qspi driver that occurs during probe-time DMA setup failure. The driver fails to clear a pointer, leading to an expired pointer dereference, which requires a local authenticated attacker to trigger.

The CVSS score of 7.8 indicates a high severity. While the attack vector is local (AV:L), the impact on confidentiality, integrity, and availability is total. A successful exploit could lead to privilege escalation or kernel-level code execution, posing a severe risk to the security of the underlying host.

Immediate Action: Update the Linux kernel to version 5.10.258, 5.15.209, 6.1.175, 6.6.142, or later.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service crashes occurring during driver initialization or SPI bus activity.

Compensating Controls: Restrict local access to systems utilizing the ti-qspi driver to trusted users only to minimize the risk of exploitation.

Public Exploit Available: No (exploit_available: false)

Although the vulnerability requires local access, the potential for code execution makes this a high-priority item for systems using the affected hardware. Administrators should apply the recommended kernel patches during the next maintenance window to eliminate the risk of local privilege escalation.