CVE-2026-19947

The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c contains an authorization flaw where the system calls devmux_select_get() and devmux_select_set() bypass kernel-object validation. When CONFIG_USERSPACE and CONFIG_DEVMUX are enabled, user-mode verifiers fail to perform k_object...