CVE-2026-23221: bus: fsl-mc: fix use-after-free in driver_override_show()
bus: fsl-mc: fix use-after-free in driveroverrideshow()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Configuration
Update driver_override_show() to hold device_lock while reading the driver_override string, matching driver_set_override()'s locking behavior.
Linux kernel bus: fsl-mc device_lock usage in driver_override_show() = hold device_lock around the read operation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23221?
CVE-2026-23221 has been classified as a moderate severity vulnerability affecting the Linux kernel.
What is the nature of the vulnerability in CVE-2026-23221?
CVE-2026-23221 involves a use-after-free issue in the driver_override_show() function of the Linux kernel.
How can I fix CVE-2026-23221?
To fix CVE-2026-23221, update the Linux kernel to the latest patched version that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2026-23221?
CVE-2026-23221 affects multiple versions of the Linux kernel prior to the application of the relevant security patch.
What are the potential impacts of CVE-2026-23221?
The potential impacts of CVE-2026-23221 include system instability or exploitation leading to unauthorized access.