Security tracker / CVE-2025-37842

CVE-2025-37842

spi: fsl-qspi: use devm function instead of driver remove

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 8fcb830a00f0 ("spi: spi-fsl-qspi: use
 carnil> devm_spi_register_controller"). Vulnerable versions: 5.2.

Bugs

Status

Branch	Status
upstream	released (6.15-rc1) [40369bfe717e96e26650eeecfa5a6363563df6e4]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.14-upstream-stable	released (6.14.3) [f9bfb3a5f6f616f3eb7665c8ff3bcb9760ae33c8]
6.12-upstream-stable	released (6.12.36) [f68b27d82a749117d9c7d7f33fa53f46373e38e2]
6.6-upstream-stable	released (6.6.105) [50ae352c1848cab408fb4f7d7f50c71f818bbdbf]
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.37-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed