CVE-2026-53234

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the IBM EMAC driver during device removal. The driver utilized devm register netdev(), which defers the unregister netdev() call until the devres cleanup phase, occurring after the emac remove() function returns. This sequence creates a window where the network stack may still process packets and trigger handlers such as emac irq() or emac poll(), which then attempt to access hardware resources that have already been freed by emac remove(), specifically dev->emacp and dev->mal.

Recommendations Replace the use of devm register netdev() with manual register netdev() and ensure unregister netdev() is called at the start of the emac remove() function before hardware teardown begins.