Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53273

In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a199 ("tee: optee: Fix supplicant wait loop") made the client wait as killable so it can be interrupted during shutdown or after a supplicant crash. This changes the original lifetime expectations: the client task can now terminate while the supplicant is still processing its request. If the client exits first it removes the request
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1fcaa5c64f77bd218ebc8239fc6349b8b4ffa909d8cfb11a2ecbba70bef6e146
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/tee/optee/supp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"less…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/tee/optee/supp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"416259cb5bffecaaae5f76539deb535a8c1b2c34","status":"affected","version":"0180cf0373f84fff61b16f8c062553a13dd7cfca","versionType":"git"},{"lessThan":"724d0caffd4204b46f78efe22f18f8338031c6e1","status":"affected","version":"c0a9a948159153be145f9471435695373904ee6d","versionType":"git"},{"lessThan":"ae847ab29ded2d7cece4d5970f0edefa4137bf2f","status":"affected","version":"ec18520f5edc20a00c34a…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/tee/optee/supp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"less…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/tee/optee/supp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"416259cb5bffecaaae5f76539deb535a8c1b2c34","status":"affected","version":"0180cf0373f84fff61b16f8c062553a13dd7cfca","versionType":"git"},{"lessThan":"724d0caffd4204b46f78efe22f18f8338031c6e1","status":"affected","version":"c0a9a948159153be145f9471435695373904ee6d","versionType":"git"},{"lessThan":"ae847ab29ded2d7cece4d5970f0edefa4137bf2f","status":"affected","version":"ec18520f5edc20a00c34a…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/373152c94e57e9592b68c100e224fbd943cfd608"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/387a926ee166814611acecb960207fe2f3c4fd3e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/416259cb5bffecaaae5f76539deb535a8c1b2c34"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/724d0caffd4204b46f78efe22f18f8338031c6e1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/9a0dc9279d0907b198f205a693aedf696b08145d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/ae847ab29ded2d7cece4d5970f0edefa4137bf2f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/d366a01475f927402c96a3fe78bfc06b924fc87d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/d5b57bb314d79e99bebb58a53588fa11dd4dbf69"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a8148ad9f26a5e2c6d4b9e70b3111829d6f613a2dbd659bd3d7952a7e57ddb8a · sha256:1315aad1fab0a45f… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer