CVE-2026-53273
kernel: tee: optee: prevent use-after-free when the client exits before the supplicant
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Trusted Execution Environment (TEE) subsystem, specifically within the OP-TEE driver. This use-after-free vulnerability occurs when a client task terminates before its associated supplicant has finished processing a request. This timing issue can lead to the system attempting to access memory that has already been freed, potentially resulting in a denial of service or arbitrary code execution.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference