In the Linux kernel, the following vulnerability has been resolved:
cdx: Fix possible UAF error in driver_override_show()
Fixed a possible UAF problem in driver_override_show() in drivers/cdx/cdx.c
This function driver_override_show() is part of DEVICE_ATTR_RW, which includes both driver_override_show() and driver_override_store(). These functions can be executed concurrently in sysfs.
The driver_override_store() function uses driver_set_override() to update the driver_override value, and driver_set_override() internally locks the device (device_lock(dev)). If driver_override_show() reads cdx_dev->driver_override without locking, it could potentially access a freed pointer if driver_override_store() frees the string concurrently. This could lead to printing a kernel address, which is a security risk since DEVICE_ATTR can be read by all users.
Additionally, a similar pattern is used in drivers/amba/bus.c, as well as many other bus drivers, where device_lock() is taken in the show function, and it has been working without issues.
This potential bug was detected by our experimental static analysis tool, which analyzes locking APIs and paired functions to identify data races and atomicity violations.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-rt-develUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-docsUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-armUpgrade kernel-debug-vdso | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-azure-6.11Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-84-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-azureUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-6.11Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gke-64k-6.8 | Jun 26, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub