CVE-2026-53119

Awaiting Analysis Awaiting Analysis - Queue

WMI Driver Override Use-After-Free in Linux Kernel

Publication date: 2026-06-24

Last updated on: 2026-07-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without the device lock held is intentional. [1]

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-14

Generated

2026-07-15

AI Q&A

2026-06-24

EPSS Evaluated

2026-07-13

NVD

CVE-2026-53119

EUVD

EUVD-2026-38987

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*
linux_kernel	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's platform/wmi component. When a driver is attached using the __driver_attach() function, the bus' match() callback is called without holding the device lock. This causes the driver_override field to be accessed without proper locking, which can lead to a use-after-free (UAF) condition.

The issue is fixed by using the driver-core driver_override infrastructure, which manages proper locking internally to prevent this unsafe access.

Impact Analysis

The vulnerability can lead to a use-after-free (UAF) condition in the Linux kernel. UAF vulnerabilities can cause system instability, crashes, or potentially allow an attacker to execute arbitrary code with kernel privileges, depending on the exploitation scenario.

Hi! I’m here to help you understand CVE-2026-53119. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70