CVE-2026-89740serial: imx: serialize imx_uart_ports[] lifetime
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: serial: imx: serialize imx_uart_ports[] lifetime imx_uart_probe() publishes its devm-allocated port in imx_uart_ports[] before uart_add_one_port() because console setup uses the table. The entry is not cleared when adding the port fails or after removal, leaving a dangling pointer. A sibling probe can register the shared console through that stale entry. This was reproduced under KASAN on QEMU mcimx6ul-evk by unbinding a sibling UART, unbinding the console UART and rebinding the sibling. Keep the entry valid through uart_remove_one_port(), then clear it. Protect port addition and removal together with their table updates so sibling operations cannot interleave. Reject an occupied slot rather than clobbering an active port during a duplicate-line probe.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from dbff4e9ea2e83fda89143389bfb229cb29425a32 before 681696ae9e4a28bdf54893c807dfe4a6c08e30a5; from dbff4e9ea2e83fda89143389bfb229cb29425a32 before 28b932202fcdbeb2ef58d89ce4363f480433c234; from dbff4e9ea2e83fda89143389bfb229cb29425a32 before 7429dce56a73bc080a8c072edb167106f73a08ae; from dbff4e9ea2e83fda89143389bfb229cb29425a32 before 8b0b29fdcb47907ae0296b8fe829e918e05e300f | CNA record |
References
- https://git.kernel.org/stable/c/681696ae9e4a28bdf54893c807dfe4a6c08e30a5
- https://git.kernel.org/stable/c/28b932202fcdbeb2ef58d89ce4363f480433c234
- https://git.kernel.org/stable/c/7429dce56a73bc080a8c072edb167106f73a08ae
- https://git.kernel.org/stable/c/8b0b29fdcb47907ae0296b8fe829e918e05e300f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.