In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1]

A flaw was found in the Linux kernel's `platform/wmi` component. A vulnerability exists where a driver's `match()` function can access memory after it has been freed (Use-After-Free), due to improper locking during driver probing. This could allow an attacker to execute arbitrary code or cause the system to crash, leading to a denial of service.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-53119 https://nvd.nist.gov/vuln/detail/CVE-2026-53119 https://lore.kernel.org/linux-cve-announce/2026062416-CVE-2026-53119-7d1c@gregkh/T