CVE Database›Document archive›CVE-2026-53025

CVE-2026-53025

kernel: greybus: raw: fix use-after-free on cdev close

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Greybus raw subsystem. A local user application could trigger a use-after-free vulnerability by disconnecting a Greybus raw bundle while its associated character device was still open. When the application subsequently attempts to release the character device, it accesses freed memory, leading to a kernel panic and a system-wide Denial of Service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference