SUSE CVE-2026-98748

In the Linux kernel, the following vulnerability has been resolved: serial: 8250bcm7271: fix use-after-free in brcmuartremove brcmuarthandleirq starts priv-hrt to work around a receive-timeout quirk of the 8250 core when hardware flow control is enabled; the timer callback brcmuarthrtimerfunc...

PT-2026-116967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the brcmuart remove function. The brcmuart handle irq function starts priv-hrt to address a receive-timeout quirk of the 8250 core during hardware flow...

PT-2026-128633

In the Linux kernel, the following vulnerability has been resolved: serial: 8250 bcm7271: fix use-after-free in brcmuart remove brcmuart handle irq starts priv-hrt to work around a receive-timeout quirk of the 8250 core when hardware flow control is enabled; the timer callback brcmuart hrtimer fu...

Astra Linux – vulnerability in linux-5.10, linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port-pm on port specific driver unbind When we unbind a serial port hardware-specific 8250 driver, the generic serial8250 driver takes over the port. About 10 seconds later, an oops occurs. This can result in...

Linux Distros Unpatched Vulnerability : CVE-2026-97480

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: serial: 8250: protect against NULL uart-port.dev in register serial8250register8250port conditionally copies uart-port.dev from up-port.dev only when...

PT-2026-98099

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial8250 register 8250 port function where uart-port.dev is conditionally copied from up-port.dev only if the latter is non-NULL. If both the existing uart slot...

Linux kernel serial port DoS

The vulnerability in the serial8250txdmaflush function within the drivers/tty/serial/8250/8250dma.c file of the TTY driver for the Linux kernel’s serial port is related to system boundary control flaws. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CVE-2026-74654: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dma: Clear stale RX state on shutdown serial8250releasedma terminates RX DMA and releases the channel, but leaves rxrunning set. If the port is closed while an RX transfer is active, the stale state remains while rxch...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000324)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000324 advisory. The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250core.c:serial8250isainitports that allows local users ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989173)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989173 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix PM usagecount for console handover When console is enabled, univ8250consolesetu...

EUVD-2022-54619

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix PM usagecount for console handover When console is enabled, univ8250consolesetup calls serial8250consolesetup before .dev is set to uartport. Therefore, it will not call pmruntimegetsync. Later, when the actual...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-395259)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-395259 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: 8250port: Check IRQ data before use In case the leaf driver wants to use IRQ polling irq ...

SUSE CVE-2023-53176

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port-pm on port specific driver unbind When we unbind a serial port hardware specific 8250 driver, the generic serial8250 driver takes over the port. After that we see an oops about 10 seconds later. This can...

CVE-2023-53176: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port-pm on port specific driver unbind When we unbind a serial port hardware specific 8250 driver, the generic serial8250 driver takes over the port. After that we see an oops about 10 seconds later. This can...

Linux Distros Unpatched Vulnerability : CVE-2025-39724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an emp...

CVE-2025-39724: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERRRESPEN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR Receive Buffer Register while the FIFO is enabled. In...

Linux Distros Unpatched Vulnerability : CVE-2023-52567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: serial: 8250port: Check IRQ data before use In case the leaf driver wants to use IRQ polling...

Linux Distros Unpatched Vulnerability : CVE-2020-15437

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250core.c:serial8250isainitports that allows local...

CVE-2022-49613

CVE-2022-49613 affects the Linux kernel serial driver 8250 console handover. When a console is enabled, univ8250_console_setup() runs before .dev is bound to the uart_port, so pm_runtime_get_sync() is skipped. Later, during handover, serial8250_console_exit() may call pm_runtime_put_sync() with a...

CVE-2022-49613: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix PM usagecount for console handover When console is enabled, univ8250consolesetup calls serial8250consolesetup before .dev is set to uartport. Therefore, it will not call pmruntimegetsync. Later, when the actual...