Linux Kernel SPI Controller Uninitialized Memory Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's SPI (Serial Peripheral Interface) subsystem. This issue arises in the 'devm_spi_register_controller' function. When 'devm_add_action_or_reset()' fails, 'devm_spi_unregister()' is called, which decreases the reference count of the SPI controller's device. This can lead to a use-after-free condition in drivers that call 'spi_put_controller()' during error handling.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.