CVE Database›Document archive›CVE-2026-43458

CVE-2026-43458

kernel: serial: caif: hold tty->link reference in ldisc_open and ser_release

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel, specifically within the caif_serial line discipline. This vulnerability, a use-after-free, occurs due to improper management of the tty->link reference during the ldisc_open and ser_release functions. A local attacker could exploit this by triggering the caif_serial transmit path, which may lead to a system crash, resulting in a Denial of Service (DoS), or potentially allow for privilege escalation.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-911 · Improper Update of Reference Count