Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2026-64528

Summary
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At-25 Jul, 2026 | 09:20
Updated At-25 Jul, 2026 | 09:20
Rejected At-
Credits

tty: serial: samsung: Remove redundant port lock acquisition in rx helpers

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when the console flow is engaged [1]. When console flow control is enabled (UPF_CONS_FLOW), s3c24xx_serial_stop_tx() calls s3c24xx_serial_rx_enable() and s3c24xx_serial_start_tx() calls s3c24xx_serial_rx_disable(). The serial core framework invokes the .stop_tx() and .start_tx() callbacks with the port->lock spinlock already held. Furthermore, all internal driver paths that invoke stop_tx (such as the DMA TX completion handler s3c24xx_serial_tx_dma_complete() or the PIO TX IRQ handler s3c24xx_serial_tx_irq()) also acquire port->lock prior to calling it. (Note that s3c24xx_serial_start_tx() is only invoked by the serial core). However, s3c24xx_serial_rx_enable() and s3c24xx_serial_rx_disable() unconditionally attempt to acquire port->lock again using uart_port_lock_irqsave(). Since spinlocks are not recursive, this causes a deadlock on the same CPU when console flow control is engaged. Remove the redundant lock acquisition from both rx helper functions.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Linux
Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 09:20
Updated At:25 Jul, 2026 | 09:20
Rejected At:
▼CVE Numbering Authority (CNA)
tty: serial: samsung: Remove redundant port lock acquisition in rx helpers

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when the console flow is engaged [1]. When console flow control is enabled (UPF_CONS_FLOW), s3c24xx_serial_stop_tx() calls s3c24xx_serial_rx_enable() and s3c24xx_serial_start_tx() calls s3c24xx_serial_rx_disable(). The serial core framework invokes the .stop_tx() and .start_tx() callbacks with the port->lock spinlock already held. Furthermore, all internal driver paths that invoke stop_tx (such as the DMA TX completion handler s3c24xx_serial_tx_dma_complete() or the PIO TX IRQ handler s3c24xx_serial_tx_irq()) also acquire port->lock prior to calling it. (Note that s3c24xx_serial_start_tx() is only invoked by the serial core). However, s3c24xx_serial_rx_enable() and s3c24xx_serial_rx_disable() unconditionally attempt to acquire port->lock again using uart_port_lock_irqsave(). Since spinlocks are not recursive, this causes a deadlock on the same CPU when console flow control is engaged. Remove the redundant lock acquisition from both rx helper functions.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/tty/serial/samsung_tty.c
Default Status
unaffected
Versions
Affected
  • From b497549a035c2a81b71c7a27f2b00c8a16c09423 before ee9eb72be95490602c493db050c73d925c3a4d74 (git)
  • From b497549a035c2a81b71c7a27f2b00c8a16c09423 before 10014eb7eee351f7b587f8ac85830f0c9343cb9a (git)
  • From b497549a035c2a81b71c7a27f2b00c8a16c09423 before f4c3e63fa8639aedf96fb200d9939945a9eed51e (git)
  • From b497549a035c2a81b71c7a27f2b00c8a16c09423 before a9c22e0f93ba18322a6623ecdda2f0cd858ca350 (git)
  • From b497549a035c2a81b71c7a27f2b00c8a16c09423 before 14143ec10d69f42806b5d7b046f0fd1b835831ae (git)
  • From b497549a035c2a81b71c7a27f2b00c8a16c09423 before 9fd48937046efc9abb89379d63ee9cc5c661d711 (git)
  • From b497549a035c2a81b71c7a27f2b00c8a16c09423 before 9c92b42207978559e32903c3098aaf5c5b5788b2 (git)
  • From b497549a035c2a81b71c7a27f2b00c8a16c09423 before a3bb136bff5e6a5e48cdd813246c9c4686feaaa9 (git)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/tty/serial/samsung_tty.c
Default Status
affected
Versions
Affected
  • 2.6.27
Unaffected
  • From 0 before 2.6.27 (semver)
  • From 5.10.259 through 5.10.* (semver)
  • From 5.15.210 through 5.15.* (semver)
  • From 6.1.176 through 6.1.* (semver)
  • From 6.6.143 through 6.6.* (semver)
  • From 6.12.93 through 6.12.* (semver)
  • From 6.18.35 through 6.18.* (semver)
  • From 7.0.12 through 7.0.* (semver)
  • From 7.1 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://git.kernel.org/stable/c/ee9eb72be95490602c493db050c73d925c3a4d74
N/A
https://git.kernel.org/stable/c/10014eb7eee351f7b587f8ac85830f0c9343cb9a
N/A
https://git.kernel.org/stable/c/f4c3e63fa8639aedf96fb200d9939945a9eed51e
N/A
https://git.kernel.org/stable/c/a9c22e0f93ba18322a6623ecdda2f0cd858ca350
N/A
https://git.kernel.org/stable/c/14143ec10d69f42806b5d7b046f0fd1b835831ae
N/A
https://git.kernel.org/stable/c/9fd48937046efc9abb89379d63ee9cc5c661d711
N/A
https://git.kernel.org/stable/c/9c92b42207978559e32903c3098aaf5c5b5788b2
N/A
https://git.kernel.org/stable/c/a3bb136bff5e6a5e48cdd813246c9c4686feaaa9
N/A
Hyperlink: https://git.kernel.org/stable/c/ee9eb72be95490602c493db050c73d925c3a4d74
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/10014eb7eee351f7b587f8ac85830f0c9343cb9a
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/f4c3e63fa8639aedf96fb200d9939945a9eed51e
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a9c22e0f93ba18322a6623ecdda2f0cd858ca350
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/14143ec10d69f42806b5d7b046f0fd1b835831ae
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/9fd48937046efc9abb89379d63ee9cc5c661d711
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/9c92b42207978559e32903c3098aaf5c5b5788b2
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a3bb136bff5e6a5e48cdd813246c9c4686feaaa9
Resource: N/A
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:25 Jul, 2026 | 10:17
Updated At:25 Jul, 2026 | 10:17

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers Sashiko identified a deadlock when the console flow is engaged [1]. When console flow control is enabled (UPF_CONS_FLOW), s3c24xx_serial_stop_tx() calls s3c24xx_serial_rx_enable() and s3c24xx_serial_start_tx() calls s3c24xx_serial_rx_disable(). The serial core framework invokes the .stop_tx() and .start_tx() callbacks with the port->lock spinlock already held. Furthermore, all internal driver paths that invoke stop_tx (such as the DMA TX completion handler s3c24xx_serial_tx_dma_complete() or the PIO TX IRQ handler s3c24xx_serial_tx_irq()) also acquire port->lock prior to calling it. (Note that s3c24xx_serial_start_tx() is only invoked by the serial core). However, s3c24xx_serial_rx_enable() and s3c24xx_serial_rx_disable() unconditionally attempt to acquire port->lock again using uart_port_lock_irqsave(). Since spinlocks are not recursive, this causes a deadlock on the same CPU when console flow control is engaged. Remove the redundant lock acquisition from both rx helper functions.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
CPE Matches

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://git.kernel.org/stable/c/10014eb7eee351f7b587f8ac85830f0c9343cb9a416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/14143ec10d69f42806b5d7b046f0fd1b835831ae416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/9c92b42207978559e32903c3098aaf5c5b5788b2416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/9fd48937046efc9abb89379d63ee9cc5c661d711416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/a3bb136bff5e6a5e48cdd813246c9c4686feaaa9416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/a9c22e0f93ba18322a6623ecdda2f0cd858ca350416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/ee9eb72be95490602c493db050c73d925c3a4d74416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
https://git.kernel.org/stable/c/f4c3e63fa8639aedf96fb200d9939945a9eed51e416baaa9-dc9f-4396-8d5f-8c081fb06d67
N/A
Hyperlink: https://git.kernel.org/stable/c/10014eb7eee351f7b587f8ac85830f0c9343cb9a
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/14143ec10d69f42806b5d7b046f0fd1b835831ae
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/9c92b42207978559e32903c3098aaf5c5b5788b2
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/9fd48937046efc9abb89379d63ee9cc5c661d711
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a3bb136bff5e6a5e48cdd813246c9c4686feaaa9
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/a9c22e0f93ba18322a6623ecdda2f0cd858ca350
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/ee9eb72be95490602c493db050c73d925c3a4d74
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/f4c3e63fa8639aedf96fb200d9939945a9eed51e
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource: N/A

Change History

0
Information is not available yet

Similar CVEs

0Records found

Details not found