CVE-2026-53115
kernel: bus: fsl-mc: use generic driver_override infrastructure
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's fsl-mc bus driver. During the driver probing process, a Use-After-Free (UAF) vulnerability can occur because the match() callback accesses the driver_override field without proper locking. This can lead to system instability or potentially allow an attacker to execute arbitrary code.
Statement
This vulnerability is rated Moderate because exploitation requires local access and is constrained to systems utilizing the Freescale Management Complex (fsl-mc) bus architecture. On typical Red Hat Enterprise Linux and Red Hat In-Vehicle OS deployments lacking this specialized NXP hardware, the affected bus driver is not exercised. Furthermore, triggering the race condition during device probing requires local administrative interaction with driver override settings, substantially limiting practical impact.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-413 · Improper Resource Locking