PT-2026-52013 · Linux · Linux

Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-53119

NVD

In the Linux kernel, the following vulnerability has been resolved:

platform/wmi: use generic driver override infrastructure

When a driver is probed through driver attach(), the bus' match() callback is called without the device lock held, thus accessing the driver override field without a lock, which can cause a UAF.

Fix this by using the driver-core driver override infrastructure taking care of proper locking internally.

Note that calling match() from driver attach() without the device lock held is intentional. [1]

Identificadores relacionados

CVE-2026-53119

Produtos afetados

Linux

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-53119 · Nota de Segurança
• https://git.kernel.org/stable/c/8a700b1fc94df4d847a04f14ebc7f8532592b367 · Nota
• https://git.kernel.org/stable/c/2c5507010fc3b8e2bd596c63c88f6ad39a69b1c4 · Nota
• https://git.kernel.org/stable/c/4dc755d86deed88789540d960e421124bad4c568 · Nota
• https://git.kernel.org/stable/c/13d201bd840d2e2a645ef899f81342cd27ced346 · Nota