CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of 8250 serial ports, where a failure in clock notifier registration allows the port to remain registered despite an error, leading to a use-after-free condition. This flaw can be exploited to execute arbitrary code or cause system instability, posing a critical risk to systems utilizing affected serial drivers. Organizations running Linux systems with these drivers should prioritize patching to mitigate potential exploitation risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port via serial8250_register_8250_port() and then, if the device has a clock, registers a clock notifier. If clk_notifier_register() fails, probe returns the error but leaves the 8250 port registered. The matching serial8250_unregister_port() lives in dw8250_remove(), which is not called when probe fails, so the port slot stays occupied until the device is rebound or the system is rebooted. The devm-allocated driver data is freed while the port still references it (via the saved private_data and serial_in/serial_out callbacks), so any access to that port slot before a rebind is a use-after-free hazard. Unregister the port on the clk_notifier_register() error path.
Related CVEs
Other vulnerabilities affecting the same vendor(s)