SB2026090431 - Use-after-free in Linux kernel tty serial driver
Published: September 4, 2026
Security Bulletin ID
SB2026090431
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Use-after-free (CVE-ID: CVE-2026-80737)
CWE-ID: CWE-416 - Use After Free
CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause memory corruption.
The vulnerability exists due to a use-after-free in the AMBA PL011 serial driver's DMA shutdown handling when DMA activity is being terminated. A local user can trigger DMA shutdown while TX callbacks or RX polling remain active to cause memory corruption.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/440915499231e9db1c361aa45bb702e8fd3b4a32
- https://git.kernel.org/stable/c/44bd0ecc3444882d08ecfbc2b2418d2f463d3186
- https://git.kernel.org/stable/c/5974cb66681eac367107b05924744d7e3b49d41c
- https://git.kernel.org/stable/c/9f6989e477f03a4721d34bb4b09b17accd40283e
- https://git.kernel.org/stable/c/a38fae9d212e2d3ed5e9ec0ef773f8c0a27fb76e
- https://git.kernel.org/stable/c/c8c8e895f65fbf71ea6224e27cf8dab91b776e0d
- https://git.kernel.org/stable/c/f70c9d4fba46463a5b1c7b3ee9ee3b40c90dac03
- https://git.kernel.org/stable/c/fdfb46c387241b4eddd36d746793764413285913