In the Linux kernel, the following vulnerability has been resolved:
serial: sc16is7xx: fix invalid FIFO access with special register set
When enabling access to the special register set, Receiver time-out and RHR interrupts can happen. In this case, the IRQ handler will try to read from the FIFO thru the RHR register at address 0x00, but address 0x00 is mapped to DLL register, resulting in erroneous FIFO reading.
Call graph example: sc16is7xx_startup(): entry sc16is7xx_ms_proc(): entry sc16is7xx_set_termios(): entry sc16is7xx_set_baud(): DLH/DLL = $009C --> access special register set sc16is7xx_port_irq() entry --> IIR is 0x0C sc16is7xx_handle_rx() entry sc16is7xx_fifo_read(): --> unable to access FIFO (RHR) because it is mapped to DLL (LCR=LCR_CONF_MODE_A) sc16is7xx_set_baud(): exit --> Restore access to general register set
Fix the problem by claiming the efr_lock mutex when accessing the Special register set.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Sep 4, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade dtb-lgUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-default-manUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade kernel-debugUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade dtb-appleUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-rt | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatency | Dec 13, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub