CVE-2026-53119: platform/wmi: use generic driver_override infrastructure
In the Linux kernel, the following vulnerability has been resolved:
platform/wmi: use generic driveroverride infrastructure
When a driver is probed through driverattach(), the bus' match() callback is called without the device lock held, thus accessing the driveroverride field without a lock, which can cause a UAF.
Fix this by using the driver-core driveroverride infrastructure taking care of proper locking internally.
Note that calling match() from driverattach() without the device lock held is intentional. [1]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53119?
The severity of CVE-2026-53119 is rated as risk 36.
How do I fix CVE-2026-53119?
To fix CVE-2026-53119, update to the patched version of the Linux kernel that addresses this vulnerability.
What type of systems are affected by CVE-2026-53119?
CVE-2026-53119 affects Linux kernel systems that implement the platform/wmi driver infrastructure.
What are the potential consequences of CVE-2026-53119?
The consequences of CVE-2026-53119 may include unauthorized access or manipulation of the driver_override field in the Linux kernel.
When was CVE-2026-53119 published?
CVE-2026-53119 was published on June 24, 2026.