CVE-2023-54220

CVE-2023-54220

High · published December 30, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250: Fix oops for port->pm on uart_change_pm()

Unloading a hardware specific 8250 driver can produce error "Unable to

handle kernel paging request at virtual address" about ten seconds after

unloading the driver. This happens on uart_hangup() calling

uart_change_pm().

Turns out commit 04e82793f068 ("serial: 8250: Reinit port->pm on port

specific driver unbind") was only a partial fix. If the hardware specific

driver has initialized port->pm function, we need to clear port->pm too.

Just reinitializing port->ops does not do this. Otherwise serial8250_pm()

will call port->pm() instead of serial8250_do_pm().

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Published
2025-12-30T18:16Z
References (8)
EPSS history
Timeline
  • 30 DEC 12:11Z
    serial: 8250: Fix oops for port->pm on uart_change_pm()
    cvelistv5