Linux Kernel CH341 SPI Driver USB Interface Devres Lifetime Management Vulnerability

A vulnerability in the Linux kernel's CH341 USB to SPI driver has been addressed. The issue was related to improper management of device resources, which could lead to memory leaks when drivers were unbound without physical disconnection of the devices. This vulnerability affected the USB interface management in the device tree. The problem has been fixed by tying the lifetime of the driver data and SPI controller to the USB interface, ensuring proper resource release when the driver is unbound.

Impact

The vulnerability could cause memory leaks by not properly releasing resources when the driver is unbound, potentially leading to increased memory usage and degradation of system performance over time.

Remediation

Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability.