In the Linux kernel, the following vulnerability has been resolved:
serial: mxs-auart: add spinlock around changing cts state
The uart_handle_cts_change() function in serial_core expects the caller to hold uport->lock. For example, I have seen the below kernel splat, when the Bluetooth driver is loaded on an i.MX28 board.
[ 85.119255] ------------[ cut here ]------------ [ 85.124413] WARNING: CPU: 0 PID: 27 at /drivers/tty/serial/serial_core.c:3453 uart_handle_cts_change+0xb4/0xec [ 85.134694] Modules linked in: hci_uart bluetooth ecdh_generic ecc wlcore_sdio configfs [ 85.143314] CPU: 0 PID: 27 Comm: kworker/u3:0 Not tainted 6.6.3-00021-gd62a2f068f92 #1 [ 85.151396] Hardware name: Freescale MXS (Device Tree) [ 85.156679] Workqueue: hci0 hci_power_on [bluetooth] (...) [ 85.191765] uart_handle_cts_change from mxs_auart_irq_handle+0x380/0x3f4 [ 85.198787] mxs_auart_irq_handle from __handle_irq_event_percpu+0x88/0x210 (...)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-4.14.348-265.562Upgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.216-204.855Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perf-debuginfo | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-rt-extraUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade reiserfs-kmp-rt | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-oemUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-azureUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-intelUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-genericUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub