In the Linux kernel, the following vulnerability has been resolved:
platform/x86: dell-uart-backlight: fix serdev race
The dell_uart_bl_serdev_probe() function calls devm_serdev_device_open() before setting the client ops via serdev_device_set_client_ops(). This ordering can trigger a NULL pointer dereference in the serdev controller's receive_buf handler, as it assumes serdev->ops is valid when SERPORT_ACTIVE is set.
This is similar to the issue fixed in commit 5e700b384ec1 ("platform/chrome: cros_ec_uart: properly fix race condition") where devm_serdev_device_open() was called before fully initializing the device.
Fix the race by ensuring client ops are set before enabling the port via devm_serdev_device_open().
Note, serdev_device_set_baudrate() and serdev_device_set_flow_control() calls should be after the devm_serdev_device_open() call.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-azure-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1020-oemUpgrade linux-image-6.11.0-1014-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.11.0-1013-azureUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-6.11.0-1014-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1012-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1013-gcpUpgrade linux-image-6.11.0-1012-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1011-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-24-genericUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1012-lowlatency-64kUpgrade linux-image-6.11.0-24-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1008-realtimeUpgrade linux-image-6.11.0-1013-gcp-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1013-azure-fde | Apr 24, 2025 | Feb 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub