CVE-2026-53115
Description
A flaw was found in the Linux kernel's fsl-mc bus driver. During the driver probing process, a Use-After-Free (UAF) vulnerability can occur because the match() callback accesses the driver_override field without proper locking. This can lead to system instability or potentially allow an attacker to execute arbitrary code.
Statement
This vulnerability is rated Moderate because exploitation requires local access and is constrained to systems utilizing the Freescale Management Complex (fsl-mc) bus architecture. On typical Red Hat Enterprise Linux and Red Hat In-Vehicle OS deployments lacking this specialized NXP hardware, the affected bus driver is not exercised. Furthermore, triggering the race condition during device probing requires local administrative interaction with driver override settings, substantially limiting practical impact.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | 7.8 | N/A |
| Attack Vector | Local | Local | N/A |
| Attack Complexity | Low | Low | N/A |
| Privileges Required | Low | Low | N/A |
| User Interaction | None | None | N/A |
| Scope | Unchanged | Unchanged | N/A |
| Confidentiality | None | High | N/A |
| Integrity Impact | None | High | N/A |
| Availability Impact | High | High | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
