Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64528

tty: serial: samsung: Remove redundant port lock acquisition in rx helpers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when the console flow is engaged [1]. When console flow control is enabled (UPF_CONS_FLOW), s3c24xx_serial_stop_tx() calls s3c24xx_serial_rx_enable() and s3c24xx_serial_start_tx() calls s3c24xx_serial_rx_disable(). The serial core framework invokes the .stop_tx() and .start_tx() callbacks with the port->lock spinlock already held. Furthermore, all internal driver paths that invoke stop_tx (such as the DMA TX completion handler s3c24xx_serial_tx_dma_complete() or the PIO TX IRQ handler s3c24xx_serial_tx_irq()) also acquire port->lock prior to calling it. (Note that s3c24xx_serial_start_tx() is only invoked by the serial core). However, s3c24xx_serial_rx_enable() and s3c24xx_serial_rx_disable() unconditionally attempt to acquire port->lock again using uart_port_lock_irqsave(). Since spinlocks are not recursive, this causes a deadlock on the same CPU when console flow control is engaged. Remove the redundant lock acquisition from both rx helper functions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b497549a035c2a81b71c7a27f2b00c8a16c09423 to < ee9eb72be95490602c493db050c73d925c3a4d74affected
  • b497549a035c2a81b71c7a27f2b00c8a16c09423 to < 10014eb7eee351f7b587f8ac85830f0c9343cb9aaffected
  • b497549a035c2a81b71c7a27f2b00c8a16c09423 to < f4c3e63fa8639aedf96fb200d9939945a9eed51eaffected
  • b497549a035c2a81b71c7a27f2b00c8a16c09423 to < a9c22e0f93ba18322a6623ecdda2f0cd858ca350affected
  • b497549a035c2a81b71c7a27f2b00c8a16c09423 to < 14143ec10d69f42806b5d7b046f0fd1b835831aeaffected
  • b497549a035c2a81b71c7a27f2b00c8a16c09423 to < 9fd48937046efc9abb89379d63ee9cc5c661d711affected
  • b497549a035c2a81b71c7a27f2b00c8a16c09423 to < 9c92b42207978559e32903c3098aaf5c5b5788b2affected
  • b497549a035c2a81b71c7a27f2b00c8a16c09423 to < a3bb136bff5e6a5e48cdd813246c9c4686feaaa9affected

Linux Linux

Default version status: affected

  • 2.6.27affected
  • 0 to < 2.6.27unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References