In the Linux kernel, the following vulnerability has been resolved:
serial: mxs-auart: add spinlock around changing cts state
The uart_handle_cts_change() function in serial_core expects the caller to hold uport->lock. For example, I have seen the below kernel splat, when the Bluetooth driver is loaded on an i.MX28 board.
[ 85.119255] ------------[ cut here ]------------ [ 85.124413] WARNING: CPU: 0 PID: 27 at /drivers/tty/serial/serial_core.c:3453 uart_handle_cts_change+0xb4/0xec [ 85.134694] Modules linked in: hci_uart bluetooth ecdh_generic ecc wlcore_sdio configfs [ 85.143314] CPU: 0 PID: 27 Comm: kworker/u3:0 Not tainted 6.6.3-00021-gd62a2f068f92 #1 [ 85.151396] Hardware name: Freescale MXS (Device Tree) [ 85.156679] Workqueue: hci0 hci_power_on [bluetooth] (...) [ 85.191765] uart_handle_cts_change from mxs_auart_irq_handle+0x380/0x3f4 [ 85.198787] mxs_auart_irq_handle from __handle_irq_event_percpu+0x88/0x210 (...)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.348-265.562Upgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-livepatch-5.15.158-103.164Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64 | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-toolsUpgrade perfUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-devel | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1008-ibm | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub