In the Linux kernel, the following vulnerability has been resolved:
spi: don't unoptimize message in spi_async()
Calling spimaybeunoptimizemessage() in spiasync() is wrong because the message is likely to be in the queue and not transferred yet. This can corrupt the message while it is being used by the controller driver.
spimaybeunoptimizemessage() is already called in the correct place in spifinalizecurrentmessage() to balance the call to spimaybeoptimizemessage() in spiasync().