{"id":"CVE-2026-53115","title":"bus: fsl-mc: use generic driver_override infrastructure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nbus: fsl-mc: use generic driver_override infrastructure\n\nWhen a driver is probed through __driver_attach(), the bus' match()\ncallback is called without the device lock …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < dbba371b19129abe9649553ab912e6bccf6c1a5b","Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < 4911b836f35c034c36f102db4ecbe339b38e7d1d","Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < 8139ce66b52a4a5638bfb445b037c07d4abeb08e","Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < 60bfb563a399c4597dc80588a1109758a8908b97","Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < 6c8dfb0362732bf1e4829867a2a5239fedc592d0","Linux 5.10"],"published":"2026-06-24","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:42:05.258Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53115","references":[{"url":"https://git.kernel.org/stable/c/dbba371b19129abe9649553ab912e6bccf6c1a5b"},{"url":"https://git.kernel.org/stable/c/4911b836f35c034c36f102db4ecbe339b38e7d1d"},{"url":"https://git.kernel.org/stable/c/8139ce66b52a4a5638bfb445b037c07d4abeb08e"},{"url":"https://git.kernel.org/stable/c/60bfb563a399c4597dc80588a1109758a8908b97"},{"url":"https://git.kernel.org/stable/c/6c8dfb0362732bf1e4829867a2a5239fedc592d0"}],"tags":["cve.org"],"epss":0.00175,"epssPercentile":0.06606,"ingestedAt":"2026-10-21T12:48:53.622Z","slug":"CVE-2026-53115","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbus: fsl-mc: use generic driver_override infrastructure\n\nWhen a driver is probed through __driver_attach(), the bus' match()\ncallback is called without the device lock held, thus accessing the\ndriver_override field without a lock, which can cause a UAF.\n\nFix this by using the driver-core driver_override infrastructure taking\ncare of proper locking internally.\n\nNote that calling match() from __driver_attach() without the device lock\nheld is intentional. [1]\n\n## Affected\n\n- `Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < dbba371b19129abe9649553ab912e6bccf6c1a5b`\n- `Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < 4911b836f35c034c36f102db4ecbe339b38e7d1d`\n- `Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < 8139ce66b52a4a5638bfb445b037c07d4abeb08e`\n- `Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < 60bfb563a399c4597dc80588a1109758a8908b97`\n- `Linux >= 1f86a00c1159fd77e66b1bd6ff1a183f4d46f34d < 6c8dfb0362732bf1e4829867a2a5239fedc592d0`\n- `Linux 5.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}