Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-74652

serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ The RS485 trigger hrtimers are embedded in the devm-managed port and can fire after it is freed. The IRQ handler can arm a timer, so free the IRQ first and then cancel both timers. Complete the RS485 stop without arming a timer, and cancel the timers in remove() for the suspend-then-unbind path, where shutdown is not called. This issue was found by an in-house static analysis tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2c1fd53af21b8cb13878b054894d33d3383eb1f3 to < 759ead98a39fb625be302f9aa66290985dcaa325affected
  • 2c1fd53af21b8cb13878b054894d33d3383eb1f3 to < e57f0aa5c35be37218ba0e4887b241584dd4b2d2affected
  • 2c1fd53af21b8cb13878b054894d33d3383eb1f3 to < 36672c8d7d14e9c43287528455d2c97b526ea6adaffected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.18.45 to ≤ 6.18.*unaffected
  • 7.1.9 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References