serial: 8250: Fix oops for port->pm on uart_change_pm() (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.15 % · centile 5 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port->pm on uart_change_pm() Unloading a hardware specific 8250 driver can produce error "Unable to handle kernel paging request at virtual address" about ten seconds after unloading the driver. This happens on uart_hangup() calling uart_change_pm(). Turns out commit 04e82793f068 ("serial: 8250: Reinit port->pm on port specific driver unbind") was only a partial fix. If the hardware specific driver has initialized port->pm function, we need to clear port->pm too. Just reinitializing port->ops does not do this. Otherwise serial8250_pm() will call port->pm() instead of serial8250_do_pm().
Références
- https://git.kernel.org/stable/c/66f3e55960698c874b0598277913b478ecd29573
- https://git.kernel.org/stable/c/720a297b334e85d34099e83d1f375b92c3efedd6
- https://git.kernel.org/stable/c/b653289ca6460a6552c8590b75dfa84a0140a46b
- https://git.kernel.org/stable/c/bd70d0b28010d560a8be96b44fea86fe2ba016ae
- https://git.kernel.org/stable/c/18e27df4f2b4e257c317ba8076f31a888f6cc64b
- https://git.kernel.org/stable/c/0c05493341d6f2097f75f0a5dbb7b53a9e8c5f6c
- https://git.kernel.org/stable/c/375806616f8c772c33d40e112530887b37c1a816
- https://git.kernel.org/stable/c/dfe2aeb226fd5e19b0ee795f4f6ed8bc494c1534
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2023-60421
- GCVE · GCVE-0-2023-54220
Avis du CERT-FR
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 490bf37eaabb0a857ed1ae8e75d8854e41662f1c < 66f3e55960698c874b0598277913b478ecd29573 ; affected c9e080c3005fd183c56ff8f4d75edb5da0765d2c < 720a297b334e85d34099e83d1f375b92c3efedd6 ; affected d5cd2928d31042a7c0a01464f9a8d95be736421d < b653289ca6460a6552c8590b75dfa84a0140a46b ; affected 2c86a1305c1406f45ea780d06953c484ea1d9e6e < bd70d0b28010d560a8be96b44fea86fe2ba016ae ; affected 1ba5594739d858e524ff0f398ee1ebfe0a8b9d41 < 18e27df4f2b4e257c317ba8076f31a888f6cc64b ; affected af4d6dbb1a92ea424ad1ba1d0c88c7fa2345d872 < 0c05493341d6f2097f75f0a5dbb7b53a9e8c5f6c |
| Linux · Linux | affected 6.4 ; unaffected 0 < 6.4 ; unaffected 4.14.324 ≤ 4.14.* ; unaffected 4.19.293 ≤ 4.19.* ; unaffected 5.4.255 ≤ 5.4.* ; unaffected 5.10.192 ≤ 5.10.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |