PT-2026-64759 · Linux · Linux

CVE-2026-64528

·

Published

2026-07-25

·

Updated

2026-07-25

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
tty: serial: samsung: Remove redundant port lock acquisition in rx helpers
Sashiko identified a deadlock when the console flow is engaged [1].
When console flow control is enabled (UPF CONS FLOW), s3c24xx serial stop tx() calls s3c24xx serial rx enable() and s3c24xx serial start tx() calls s3c24xx serial rx disable().
The serial core framework invokes the .stop tx() and .start tx() callbacks with the port->lock spinlock already held. Furthermore, all internal driver paths that invoke stop tx (such as the DMA TX completion handler s3c24xx serial tx dma complete() or the PIO TX IRQ handler s3c24xx serial tx irq()) also acquire port->lock prior to calling it. (Note that s3c24xx serial start tx() is only invoked by the serial core).
However, s3c24xx serial rx enable() and s3c24xx serial rx disable() unconditionally attempt to acquire port->lock again using uart port lock irqsave(). Since spinlocks are not recursive, this causes a deadlock on the same CPU when console flow control is engaged.
Remove the redundant lock acquisition from both rx helper functions.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-64528

Affected Products

Linux