Use-After-Free Vulnerability in Linux Kernel's caif_serial Component

CVE-2026-43458

What is CVE-2026-43458?

A vulnerability has been found in the Linux kernel's caif_serial component, where improper handling of tty->link references can lead to a Use-After-Free condition. This issue manifests during the execution of the tty_write_room() function, potentially resulting in unauthorized access to released memory. The fix involves maintaining an additional reference on tty->link for the duration of the caif_serial line discipline's existence, ensuring safe memory access and preventing exploitation. Users are advised to update their systems to apply this security fix.

References