PT-2026-61089 · Linux · Linux

CVE-2026-53384 · Published 2026-07-19 · Updated 2026-07-19

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250 dw: unregister 8250 port if clk notifier register() fails

dw8250 probe() registers the 8250 port via serial8250 register 8250 port() and then, if the device has a clock, registers a clock notifier. If clk notifier register() fails, probe returns the error but leaves the 8250 port registered. The matching serial8250 unregister port() lives in dw8250 remove(), which is not called when probe fails, so the port slot stays occupied until the device is rebound or the system is rebooted. The devm-allocated driver data is freed while the port still references it (via the saved private data and serial in/serial out callbacks), so any access to that port slot before a rebind is a use-after-free hazard.

Unregister the port on the clk notifier register() error path.

Fix

Related Identifiers

CVE-2026-53384

Affected Products

Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-53384 · Security Note
• https://git.kernel.org/stable/c/10fc708b4de7f86002d2d735a2dbf3b5b7f65692 · Note
• https://git.kernel.org/stable/c/3d205fe80f2181f0109150ad1fa06ee5bc046935 · Note
• https://git.kernel.org/stable/c/ccdf4510a3873b14e5e348cdb038717996f09fda · Note
• https://git.kernel.org/stable/c/511d2b92f8d20de04acafab676150d26fb5c67f4 · Note
• https://git.kernel.org/stable/c/07ffe414a708ae60551401cec5d727ed156b8caf · Note
• https://git.kernel.org/stable/c/d72650a4f334581b23a1892b888a4cb1be142f76 · Note
• https://git.kernel.org/stable/c/778b9dda4b24005a27bcd9c35c110bf8d7f259ca · Note