Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-64528

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/07/2026
Última modificación:
25/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> tty: serial: samsung: Remove redundant port lock acquisition in rx helpers<br /> <br /> Sashiko identified a deadlock when the console flow is engaged [1].<br /> <br /> When console flow control is enabled (UPF_CONS_FLOW),<br /> s3c24xx_serial_stop_tx() calls s3c24xx_serial_rx_enable() and<br /> s3c24xx_serial_start_tx() calls s3c24xx_serial_rx_disable().<br /> <br /> The serial core framework invokes the .stop_tx() and .start_tx()<br /> callbacks with the port-&gt;lock spinlock already held. Furthermore, all<br /> internal driver paths that invoke stop_tx (such as the DMA TX<br /> completion handler s3c24xx_serial_tx_dma_complete() or the PIO TX IRQ<br /> handler s3c24xx_serial_tx_irq()) also acquire port-&gt;lock prior to<br /> calling it. (Note that s3c24xx_serial_start_tx() is only invoked by the<br /> serial core).<br /> <br /> However, s3c24xx_serial_rx_enable() and s3c24xx_serial_rx_disable()<br /> unconditionally attempt to acquire port-&gt;lock again using<br /> uart_port_lock_irqsave(). Since spinlocks are not recursive, this<br /> causes a deadlock on the same CPU when console flow control is engaged.<br /> <br /> Remove the redundant lock acquisition from both rx helper functions.

Impacto