CVE-2023-52567

serial: 8250_port: Check IRQ data before use

published March 2, 2024

CVSS
—
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250_port: Check IRQ data before use

In case the leaf driver wants to use IRQ polling (irq = 0) and

IIR register shows that an interrupt happened in the 8250 hardware

the IRQ data can be NULL. In such a case we need to skip the wake

event as we came to this path from the timer interrupt and quite

likely system is already awake.

Without this fix we have got an Oops:

serial8250: ttyS0 at I/O 0x3f8 (irq = 0, base_baud = 115200) is a 16550A

...

BUG: kernel NULL pointer dereference, address: 0000000000000010

RIP: 0010:serial8250_handle_irq+0x7c/0x240

Call Trace:

? serial8250_handle_irq+0x7c/0x240

? __pfx_serial8250_timeout+0x10/0x10

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Published
2024-03-02T21:59Z
EPSS history
Timeline
  • 02 MAR 21:59Z
    serial: 8250_port: Check IRQ data before use
    cvelistv5