Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-04-27T00:00:00 kernel: driver core: enforce device_lock for driver_match_device() 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CWE-413

A flaw was found in the Linux kernel's driver core. An inconsistency in enforcing the `device_lock` for `driver_match_device()` can lead to a race condition. This issue, specifically when the `driver_override` implementation is used, can result in a use-after-free (UAF) vulnerability. A use-after-free vulnerability occurs when a program attempts to use memory after it has been freed, which can lead to system instability or potentially arbitrary code execution.

Red Hat Enterprise Linux 10 Fix deferred kernel Red Hat Enterprise Linux 6 Out of support scope kernel Red Hat Enterprise Linux 7 Fix deferred kernel Red Hat Enterprise Linux 7 Fix deferred kernel-rt Red Hat Enterprise Linux 8 Fix deferred kernel Red Hat Enterprise Linux 8 Fix deferred kernel-rt Red Hat Enterprise Linux 9 Fix deferred kernel Red Hat Enterprise Linux 9 Fix deferred kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-31688 https://nvd.nist.gov/vuln/detail/CVE-2026-31688 https://lore.kernel.org/linux-cve-announce/2026042706-CVE-2026-31688-1f56@gregkh/T