SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-80737

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's AMBA PL011 serial driver, where the `dmaengine_terminate_all()` function fails to synchronize properly, allowing a transmission callback to access a freed TX buffer. This could lead to potential memory corruption and data integrity issues. Organizations utilizing the Linux kernel in environments where the AMBA PL011 driver is deployed should prioritize addressing this vulnerability to mitigate risks associated with data corruption and system instability.

CVE
CVE-2026-80737
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaengine_terminate_all() does not wait for a running callback, so the TX callback can still touch the TX buffer after it is freed. The RX poll timer reads the RX buffers without the port lock. Switch to dmaengine_terminate_sync() and delete the RX timer before freeing the buffers.