In the Linux kernel, the following vulnerability has been resolved:
platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race
The yt2_1380_fc_serdev_probe() function calls devm_serdev_device_open() before setting the client ops via serdev_device_set_client_ops(). This ordering can trigger a NULL pointer dereference in the serdev controller's receive_buf handler, as it assumes serdev->ops is valid when SERPORT_ACTIVE is set.
This is similar to the issue fixed in commit 5e700b384ec1 ("platform/chrome: cros_ec_uart: properly fix race condition") where devm_serdev_device_open() was called before fully initializing the device.
Fix the race by ensuring client ops are set before enabling the port via devm_serdev_device_open().
Note, serdev_device_set_baudrate() and serdev_device_set_flow_control() calls should be after the devm_serdev_device_open() call.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdso | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1020-oemUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-azureUpgrade linux-image-awsUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.11.0-24-genericUpgrade linux-image-generic-64k | Apr 24, 2025 | Feb 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub