CVE-2026-53119: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1]

Засегнати продукти

• Linux Linux: 12046f8c77e0ed6d41beabde0edbb729499c970b преди 13d201bd840d2e2a645ef899f81342cd27ced346; 12046f8c77e0ed6d41beabde0edbb729499c970b преди 2c5507010fc3b8e2bd596c63c88f6ad39a69b1c4; 12046f8c77e0ed6d41beabde0edbb729499c970b преди 4dc755d86deed88789540d960e421124bad4c568; 12046f8c77e0ed6d41beabde0edbb729499c970b преди 8a700b1fc94df4d847a04f14ebc7f8532592b367
• Linux Linux: 6.11; преди 6.11; 6.12.91 до 6.12.*; 6.18.33 до 6.18.*; 7.0.10 до 7.0.*; 7.1 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-53119
• https://nvd.nist.gov/vuln/detail/CVE-2026-53119
• https://git.kernel.org/stable/c/13d201bd840d2e2a645ef899f81342cd27ced346
• https://git.kernel.org/stable/c/2c5507010fc3b8e2bd596c63c88f6ad39a69b1c4
• https://git.kernel.org/stable/c/4dc755d86deed88789540d960e421124bad4c568
• https://git.kernel.org/stable/c/8a700b1fc94df4d847a04f14ebc7f8532592b367