CVE-2026-80737

CVE-2026-80737 affects the Linux kernel's amba-pl011 UART serial driver. The root cause is a race during DMA teardown: dmaengine_terminate_all() does not wait for a running TX callback, which may access the TX buffer after it has been freed (a use-after-free ). Additionally, the RX poll timer rea...

CVE-2026-74652

A flaw was found in the Linux kernel's amba-pl011 serial driver. The RS485 trigger high-resolution timers hrtimers can fire after the device management devm-managed port is freed. This occurs because the timers are not properly canceled before the interrupt request IRQ is freed, allowing a...