CVE Database›Document archive›CVE-2026-53115

CVE-2026-53115

kernel: bus: fsl-mc: use generic driver_override infrastructure

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · June 24, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's fsl-mc bus driver. During the driver probing process, a Use-After-Free (UAF) vulnerability can occur because the match() callback accesses the driver_override field without proper locking. This can lead to system instability or potentially allow an attacker to execute arbitrary code.

Statement

This vulnerability is rated Moderate because exploitation requires local access and is constrained to systems utilizing the Freescale Management Complex (fsl-mc) bus architecture. On typical Red Hat Enterprise Linux and Red Hat In-Vehicle OS deployments lacking this specialized NXP hardware, the affected bus driver is not exercised. Furthermore, triggering the race condition during device probing requires local administrative interaction with driver override settings, substantially limiting practical impact.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-413 · Improper Resource Locking