CVE-2026-90336
Description
In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uart_register_driver() failure uart_register_driver() leaves drv->state pointing to freed memory when tty_alloc_driver() fails. If tty_register_driver() fails, drv->tty_driver also retains a pointer after its reference is dropped. Drivers that use drv->state as an "already registered" flag can then skip registration on the next probe and pass the freed state to uart_add_one_port(). This issue was found with failslab on QEMU's raspi1ap board by failing registration and binding the PL011 port again. Clear both pointers on their failure paths, as uart_unregister_driver() already does.
How to fix
- Linux Linux5e260edd28eddc3b92c9f578df3026fd11c710cf, a9c0ffe5930c97b352f32febfc59a6e6ae6772ee, 802e2192a9d38027730c2869c67c9131b8c8fe9f, ddf51d74ee9f9857c99477329d80408cedebda61, 06b376432974fe5f25f2843a8e8438c6a1cf3d50, 61a2fb25551be0375bc16ef2a70c987dfca26183 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 5e260edd28eddc3b92c9f578df3026fd11c710cf, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < a9c0ffe5930c97b352f32febfc59a6e6ae6772ee, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 802e2192a9d38027730c2869c67c9131b8c8fe9f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < ddf51d74ee9f9857c99477329d80408cedebda61, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 06b376432974fe5f25f2843a8e8438c6a1cf3d50, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 61a2fb25551be0375bc16ef2a70c987dfca26183, 2.6.12 | 5e260edd28eddc3b92c9f578df3026fd11c710cf, a9c0ffe5930c97b352f32febfc59a6e6ae6772ee, 802e2192a9d38027730c2869c67c9131b8c8fe9f, ddf51d74ee9f9857c99477329d80408cedebda61, 06b376432974fe5f25f2843a8e8438c6a1cf3d50, 61a2fb25551be0375bc16ef2a70c987dfca26183 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.