CVE-2026-23221

HIGH

Linux Kernel - Use-After-Free in fsl-mc Bus Driver Override Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix use-after-free in driver_override_show() The driver_override_show() function reads the driver_override string without holding the device_lock. However, driver_override_store() uses driver_set_override(), which modifies and frees the string while holding the device_lock. This can result in a concurrent use-after-free if the string is freed by the store function while being read by the show function. Fix this by holding the device_lock around the read operation.

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 4.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (25)
linux/Kernel < 6.18.11linux
linux/Kernel 5.10.0 - 5.15.201linux
linux/Kernel 5.16.0 - 6.1.164linux
linux/Kernel 6.13.0 - 6.18.11linux
linux/Kernel 6.19.0 - 6.19.1linux
linux/Kernel 6.2.0 - 6.6.127linux
linux/Kernel 6.7.0 - 6.12.74linux
Linux/Linux < 5.10
Linux/Linux 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d - 148891e95014b5dc5878acefa57f1940c281c431
Linux/Linux 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d - 1d6bd6183e723a7b256ff34bbb5b498b5f4f2ec0
... and 15 more
Published Feb 18, 2026
Tracked Since Feb 18, 2026