SECUFOCUSNOW
Home›CVE index›CVE-2026-53273
Review reviewHigh

CVE-2026-53273

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a199 ("tee: optee: Fix supplicant wait loop") made the client wait as killable so it can be interrupted during shutdown or after a supplicant crash. This changes the original lifetime expectations: the client task can now terminate while the supplicant is still processing its request. If the client exits first it removes the request from its queue and kfree()s it, while the request ID remains in supp->idr. A subsequent lookup on th...

CVSS
7.8
EPSS
0.12%
1.96% percentile
CISA KEV
Not listed
Published
2026.06.25
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.12%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: tee: optee: prevent use-after-free when the client exits before the supplicant Commit 70b0d6b0a199 ("tee: optee: Fix supplicant wait loop") made the client wait as killable so it can be interrupted during shutdown or after a supplicant crash. This changes the original lifetime expectations: the client task can now terminate while the supplicant is still processing its request. If the client exits first it removes the request from its queue and kfree()s it, while the request ID remains in supp->idr. A subsequent lookup on th...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
0180cf0373f84fff61b16f8c062553a13dd7cfca, c0a9a948159153be145f9471435695373904ee6d, ec18520f5edc20a00c34a8c9fdd6507c355e880f, d61cc1a435e6894bfb0dd3370c6f765d2d12825d, fd9d2d6124c293e40797a080adf8a9c237efd8b8, 70b0d6b0a199c5a3ee6c72f5e61681ed6f759612, 3eb4911364c764572e9db4ab900a57689a54e8ce, 21234efe2a8474a6d2d01ea9573319de7858ce44, 5.10.235, 5.15.179, 6.1.130, 6.6.80, 6.12.17, 5.4.291, 6.13.5, 6.14, >= 5.4.291 < 5.5, >= 5.10.235 < 5.10.259, >= 5.15.179 < 5.15.210, >= 6.1.130 < 6.1.176
Fixed versions
5.5, 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.14, 6.18.36, 7.0.13

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416