CVE-2026-31527

A flaw was found in the Linux kernel. When a driver is probed, the match() callback can access the driver_override field without proper locking, leading to a Use-After-Free (UAF) vulnerability. This memory corruption flaw could allow a local attacker to escalate privileges or execute arbitrary code.

Platform bus probing now uses the generic driver_override helpers so __driver_attach() cannot race unlocked reads. Red Hat defers privilege claims to per-product analysis; treat as core driver-core integrity until patched errata is applied. No practical module mitigation for platform core.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.