Linux Kernel Resource Leak Vulnerability in SPI STM32 OSPI Driver Remove Callback

A resource leak vulnerability has been identified in the Linux kernel's SPI STM32 OSPI driver. The issue arises in the remove callback, which prematurely exits if the PM runtime resume operation fails. This early return prevents the proper cleanup of the SPI controller and other associated resources. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability leads to a resource leak, where the SPI controller and other resources are not properly cleaned up, potentially causing issues such as memory leaks or resource exhaustion.

Remediation

Users can apply the available patch in the Linux kernel stable tree to address this vulnerability. The patch is included in the official Linux Git repository.