Linux Kernel SPI MTK SNFI Driver ECC Engine Unregistration Vulnerability

A vulnerability exists in the Linux kernel's SPI MTK SNFI driver, specifically within the NAND Flash Interface handling. The issue arises because the driver fails to properly unregister the on-host NAND Error Correction Code (ECC) engine during probe failures and device removals. This oversight can lead to resource leaks or undefined behavior, as the ECC engine remains registered even when it is no longer needed. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability can cause improper management of the NAND ECC engine, potentially leading to resource leaks or undefined behavior in the system.

Reproduction

The vulnerability can be reproduced by loading the SPI MTK SNFI driver in the Linux kernel. During the probe process, if an error occurs after the NAND ECC engine has been registered, the driver will fail to unregister the engine, leaving it in a stale state. Similarly, when the device is removed, the lack of proper cleanup can cause residual effects, such as leaving the ECC engine registered when it should not be.

Remediation

The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version of the stable Linux kernel to apply the fix.