CVE-2026-23221
HIGHLinux Kernel - Use-After-Free in fsl-mc Bus Driver Override Handling
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix use-after-free in driver_override_show() The driver_override_show() function reads the driver_override string without holding the device_lock. However, driver_override_store() uses driver_set_override(), which modifies and frees the string while holding the device_lock. This can result in a concurrent use-after-free if the string is freed by the store function while being read by the show function. Fix this by holding the device_lock around the read operation.
References (7)
Core 7
Core References
Scores
CVSS v3
7.8
EPSS
0.0002
EPSS Percentile
4.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (25)
linux/Kernel
< 6.18.11linux
linux/Kernel
5.10.0 - 5.15.201linux
linux/Kernel
5.16.0 - 6.1.164linux
linux/Kernel
6.13.0 - 6.18.11linux
linux/Kernel
6.19.0 - 6.19.1linux
linux/Kernel
6.2.0 - 6.6.127linux
linux/Kernel
6.7.0 - 6.12.74linux
Linux/Linux
< 5.10
Linux/Linux
1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d - 148891e95014b5dc5878acefa57f1940c281c431
Linux/Linux
1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d - 1d6bd6183e723a7b256ff34bbb5b498b5f4f2ec0
... and 15 more
Published
Feb 18, 2026
Tracked Since
Feb 18, 2026