serial: imx: serialize imx_uart_ports[] lifetime (Linux Linux)

CVE-2026-89740
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.21 % · centile 12 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Received

Description

In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx_uart_ports[] lifetime imx_uart_probe() publishes its devm-allocated port in imx_uart_ports[] before uart_add_one_port() because console setup uses the table. The entry is not cleared when adding the port fails or after removal, leaving a dangling pointer. A sibling probe can register the shared console through that stale entry. This was reproduced under KASAN on QEMU mcimx6ul-evk by unbinding a sibling UART, unbinding the console UART and rebinding the sibling. Keep the entry valid through uart_remove_one_port(), then clear it. Protect port addition and removal together with their table updates so sibling operations cannot interleave. Reject an occupied slot rather than clobbering an active port during a duplicate-line probe.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected dbff4e9ea2e83fda89143389bfb229cb29425a32 < ce9c074868d5c8adfb0c72de4324138d6fa1a1a8 ; affected dbff4e9ea2e83fda89143389bfb229cb29425a32 < a4acf2739434a014cdfc282175cffd3e35a97fa4 ; affected dbff4e9ea2e83fda89143389bfb229cb29425a32 < abc17fd508a511669997e48f8b014d8aa043abdf ; affected dbff4e9ea2e83fda89143389bfb229cb29425a32 < 681696ae9e4a28bdf54893c807dfe4a6c08e30a5 ; affected dbff4e9ea2e83fda89143389bfb229cb29425a32 < 28b932202fcdbeb2ef58d89ce4363f480433c234 ; affected dbff4e9ea2e83fda89143389bfb229cb29425a32 < 7429dce56a73bc080a8c072edb167106f73a08ae
Linux · Linuxaffected 2.6.27 ; unaffected 0 < 2.6.27 ; unaffected 5.15.224 ≤ 5.15.* ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.109 ≤ 6.12.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD