PT-2025-18858 · Linux+4 · Linux Kernel+4
Published
2023-03-09
·
Updated
2026-01-28
·
CVE-2023-53094
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition in the Linux kernel's serial driver, specifically in the fsl lpuart component, can lead to a NULL pointer dereference when the DMA completion interrupt occurs during DMA shutdown. This happens because the
lpuart dma shutdown() function may delete the timer using del timer sync() before the DMA completion interrupt is handled, which can cause the lpuart copy rx to tty() function to access a NULL pointer. The issue is resolved by folding del timer sync() into lpuart dma rx free() after dmaengine terminate sync() to prevent the timer from being restarted.Recommendations
To fix this issue, update the Linux kernel to a version that includes the fix for the race condition in the fsl lpuart component. Specifically, the fix involves modifying the
lpuart dma shutdown() function to ensure that the timer is not deleted until after the DMA completion interrupt has been handled.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Race Condition
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Hat
Red Os
Suse