CVE-2026-53117

A flaw was found in the Linux kernel, specifically within the s390/cio component. When a driver is being probed, a race condition can occur where the driver_override field is accessed without proper locking. This can lead to a Use-After-Free (UAF) vulnerability, which may result in system instability, crashes, or potentially allow an attacker to execute arbitrary code or escalate privileges.

Red Hat has evaluated this issue as having a Moderate security impact because successful exploitation requires local privileges and is restricted exclusively to deployments on the IBM s390x hardware architecture. The vulnerability occurs due to unsynchronized access to device driver override data during probing within the Channel I/O subsystem, which could trigger memory corruption and lead to a denial of service or potential privilege escalation. Systems running on other architectures are completely unaffected by this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.