In the Linux kernel, the following vulnerability has been resolved:
spi: mpc52xx: Add cancelworksync before module remove
If we remove the module which will call mpc52xxspiremove it will free 'ms' through spiunregistercontroller. while the work ms->work will be used. The sequence of operations that may lead to a UAF bug.
Fix it by ensuring that the work is canceled before proceeding with the cleanup in mpc52xxspiremove.