Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31527

In the Linux kernel, the following vulnerability has been resolved: driver core: platform: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_attach() without t
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:77b6cb379ab99414bd83bb8347d8cb01181a36563f830b462b950f63c281dc46
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/base/platform.c","drivers/bus/simple-pm-bus.c","drivers/clk/imx/clk-scu.c","drivers/slimbus/qcom-ngd-ctrl.c","include/linux/platform_device.h","sound/soc/samsung/i2s.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"492349e5e4a369a8b62781100a3ade470bf1ce6b","status":"affected","version":"3d713e0e382e6fcfb4bba1501645b66c129ad60b","versionType":"git"},{"lessThan":"9a6086d2a828dd2ff74cf9abcae456670febd71f","status":"affected","version":"3d713e0e382e6fcfb4b…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/base/platform.c","drivers/bus/simple-pm-bus.c","drivers/clk/imx/clk-scu.c","drivers/slimbus/qcom-ngd-ctrl.c","include/linux/platform_device.h","sound/soc/samsung/i2s.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.17"},{"lessThan":"3.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffec…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/base/platform.c","drivers/bus/simple-pm-bus.c","drivers/clk/imx/clk-scu.c","drivers/slimbus/qcom-ngd-ctrl.c","include/linux/platform_device.h","sound/soc/samsung/i2s.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"492349e5e4a369a8b62781100a3ade470bf1ce6b","status":"affected","version":"3d713e0e382e6fcfb4bba1501645b66c129ad60b","versionType":"git"},{"lessThan":"9a6086d2a828dd2ff74cf9abcae456670febd71f","status":"affected","version":"3d713e0e382e6fcfb4b…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/base/platform.c","drivers/bus/simple-pm-bus.c","drivers/clk/imx/clk-scu.c","drivers/slimbus/qcom-ngd-ctrl.c","include/linux/platform_device.h","sound/soc/samsung/i2s.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.17"},{"lessThan":"3.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffec…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/affected/1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/2b38efc05bf7a8568ec74bfffea0f5cfa62bc01d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/492349e5e4a369a8b62781100a3ade470bf1ce6b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/7c02a9bd7d14a89065fcf672b86d8e1d1a41d3b1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/9a6086d2a828dd2ff74cf9abcae456670febd71f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/edee7ee5a14c3b33f6d54641f5af5c5e9180992d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d28071991d31ff9e2a41ce986f14700f9f0a22a14af00ff86da3469674bc5ce8 · sha256:2799d560c10e8645… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer