Linux Kernel SPI QPIC SNAND ECC Engine Unregistration Vulnerability

A vulnerability exists in the Linux kernel's SPI QPIC SNAND driver, where the on-host hardware ECC engine remains registered during error conditions and device removal. This oversight can lead to use-after-free issues. The vulnerability has been addressed by modifying the probe function to properly unregister the ECC engine on errors and adding the missing unregistration call during device removal.

Impact

The vulnerability could cause use-after-free issues, potentially leading to memory corruption or exploitation.