AZL-77930
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-77930.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-77930
- Upstream
- Published
- 2026-02-18T16:22:31Z
- Modified
- 2026-08-28T17:45:54Z
- Summary
- CVE-2026-23221 affecting package kernel for versions less than 6.6.130.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
bus: fsl-mc: fix use-after-free in driver_override_show()
The driver_override_show() function reads the driver_override string without holding the device_lock. However, driver_override_store() uses driver_set_override(), which modifies and frees the string while holding the device_lock.
This can result in a concurrent use-after-free if the string is freed by the store function while being read by the show function.
Fix this by holding the device_lock around the read operation.
- References