PT-2026-64759 · Linux · Linux
CVE-2026-64528
·
Published
2026-07-25
·
Updated
2026-07-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
tty: serial: samsung: Remove redundant port lock acquisition in rx helpers
Sashiko identified a deadlock when the console flow is engaged [1].
When console flow control is enabled (UPF CONS FLOW),
s3c24xx serial stop tx() calls s3c24xx serial rx enable() and
s3c24xx serial start tx() calls s3c24xx serial rx disable().
The serial core framework invokes the .stop tx() and .start tx()
callbacks with the port->lock spinlock already held. Furthermore, all
internal driver paths that invoke stop tx (such as the DMA TX
completion handler s3c24xx serial tx dma complete() or the PIO TX IRQ
handler s3c24xx serial tx irq()) also acquire port->lock prior to
calling it. (Note that s3c24xx serial start tx() is only invoked by the
serial core).
However, s3c24xx serial rx enable() and s3c24xx serial rx disable()
unconditionally attempt to acquire port->lock again using
uart port lock irqsave(). Since spinlocks are not recursive, this
causes a deadlock on the same CPU when console flow control is engaged.
Remove the redundant lock acquisition from both rx helper functions.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux