CVE-2026-53025
kernel: greybus: raw: fix use-after-free on cdev close
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 24, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Greybus raw subsystem. A local user application could trigger a use-after-free vulnerability by disconnecting a Greybus raw bundle while its associated character device was still open. When the application subsequently attempts to release the character device, it accesses freed memory, leading to a kernel panic and a system-wide Denial of Service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference