In the Linux kernel, the following vulnerability has been resolved:
serial: mxs-auart: add spinlock around changing cts state
The uart_handle_cts_change() function in serial_core expects the caller to hold uport->lock. For example, I have seen the below kernel splat, when the Bluetooth driver is loaded on an i.MX28 board.
[ 85.119255] ------------[ cut here ]------------ [ 85.124413] WARNING: CPU: 0 PID: 27 at /drivers/tty/serial/serial_core.c:3453 uart_handle_cts_change+0xb4/0xec [ 85.134694] Modules linked in: hci_uart bluetooth ecdh_generic ecc wlcore_sdio configfs [ 85.143314] CPU: 0 PID: 27 Comm: kworker/u3:0 Not tainted 6.6.3-00021-gd62a2f068f92 #1 [ 85.151396] Hardware name: Freescale MXS (Device Tree) [ 85.156679] Workqueue: hci0 hci_power_on [bluetooth] (...) [ 85.191765] uart_handle_cts_change from mxs_auart_irq_handle+0x380/0x3f4 [ 85.198787] mxs_auart_irq_handle from __handle_irq_event_percpu+0x88/0x210 (...)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.158-103.164Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-default | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-virtualUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub