Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-80737

serial: amba-pl011: synchronize DMA teardown

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengine_terminate_all() does not wait for a running callback, so the TX callback can still touch the TX buffer after it is freed. The RX poll timer reads the RX buffers without the port lock. Switch to dmaengine_terminate_sync() and delete the RX timer before freeing the buffers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ead76f329f777c7301e0a5456a0a1c7a081570bd to < a38fae9d212e2d3ed5e9ec0ef773f8c0a27fb76eaffected
  • ead76f329f777c7301e0a5456a0a1c7a081570bd to < 44bd0ecc3444882d08ecfbc2b2418d2f463d3186affected
  • ead76f329f777c7301e0a5456a0a1c7a081570bd to < f70c9d4fba46463a5b1c7b3ee9ee3b40c90dac03affected
  • ead76f329f777c7301e0a5456a0a1c7a081570bd to < c8c8e895f65fbf71ea6224e27cf8dab91b776e0daffected
  • ead76f329f777c7301e0a5456a0a1c7a081570bd to < 9f6989e477f03a4721d34bb4b09b17accd40283eaffected
  • ead76f329f777c7301e0a5456a0a1c7a081570bd to < 5974cb66681eac367107b05924744d7e3b49d41caffected
  • ead76f329f777c7301e0a5456a0a1c7a081570bd to < fdfb46c387241b4eddd36d746793764413285913affected
  • ead76f329f777c7301e0a5456a0a1c7a081570bd to < 440915499231e9db1c361aa45bb702e8fd3b4a32affected

Linux Linux

Default version status: affected

  • 2.6.39affected
  • 0 to < 2.6.39unaffected
  • 5.10.267 to ≤ 5.10.*unaffected
  • 5.15.218 to ≤ 5.15.*unaffected
  • 6.1.185 to ≤ 6.1.*unaffected
  • 6.6.154 to ≤ 6.6.*unaffected
  • 6.12.106 to ≤ 6.12.*unaffected
  • 6.18.45 to ≤ 6.18.*unaffected
  • 7.1.9 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References