CVE-2026-43458
kernel: serial: caif: hold tty->link reference in ldisc_open and ser_release
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 8, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel, specifically within the caif_serial line discipline. This vulnerability, a use-after-free, occurs due to improper management of the tty->link reference during the ldisc_open and ser_release functions. A local attacker could exploit this by triggering the caif_serial transmit path, which may lead to a system crash, resulting in a Denial of Service (DoS), or potentially allow for privilege escalation.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-911 · Improper Update of Reference Count