AZL-77930
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-77930.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-77930
- Upstream
- Published
- 2026-02-18T16:22:31Z
- Modified
- 2026-04-01T05:04:28.420238Z
- Summary
- CVE-2026-23221 affecting package kernel 6.6.126.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
bus: fsl-mc: fix use-after-free in driveroverrideshow()
The driveroverrideshow() function reads the driveroverride string without holding the devicelock. However, driveroverridestore() uses driversetoverride(), which modifies and frees the string while holding the device_lock.
This can result in a concurrent use-after-free if the string is freed by the store function while being read by the show function.
Fix this by holding the device_lock around the read operation.
- References