CVE-2026-23221

bus: fsl-mc: fix use-after-free in driver_override_show()

published February 18, 2026

CVSS
—
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bus: fsl-mc: fix use-after-free in driver_override_show()

The driver_override_show() function reads the driver_override string

without holding the device_lock. However, driver_override_store() uses

driver_set_override(), which modifies and frees the string while holding

the device_lock.

This can result in a concurrent use-after-free if the string is freed

by the store function while being read by the show function.

Fix this by holding the device_lock around the read operation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Published
2026-02-18T14:53Z
EPSS history
Timeline
  • 18 FEB 14:53Z
    bus: fsl-mc: fix use-after-free in driver_override_show()
    cvelistv5