Driver Vulnerability in Linux Kernel Affecting Core Platform Components

CVE-2026-31527

What is CVE-2026-31527?

A vulnerability has been identified in the Linux kernel that affects the driver core when a driver is probed via the __driver_attach() function. The issue arises because the bus' match() callback is executed without holding the necessary device lock, leading to potential access of the driver_override field without appropriate locking mechanisms in place. This flaw can result in use-after-free (UAF) vulnerabilities, which may lead to unpredictable behavior in the system. The resolution involves utilizing the driver core's existing driver_override infrastructure to ensure proper locking is maintained internally during the probing process.

References