CVE-2024-38634

serial: max3100: Lock port->lock when calling uart_handle_cts_change()

published June 21, 2024

CVSS
—
EPSS
0%
Percentile
8.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

serial: max3100: Lock port->lock when calling uart_handle_cts_change()

uart_handle_cts_change() has to be called with port lock taken,

Since we run it in a separate work, the lock may not be taken at

the time of running. Make sure that it's taken by explicitly doing

that. Without it we got a splat:

WARNING: CPU: 0 PID: 10 at drivers/tty/serial/serial_core.c:3491 uart_handle_cts_change+0xa6/0xb0

...

Workqueue: max3100-0 max3100_work [max3100]

RIP: 0010:uart_handle_cts_change+0xa6/0xb0

...

max3100_handlerx+0xc5/0x110 [max3100]

max3100_work+0x12a/0x340 [max3100]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00189 · 8.1th percentile
Published
2024-06-21T10:18Z
EPSS history
Timeline
  • 21 JUN 10:18Z
    serial: max3100: Lock port->lock when calling uart_handle_cts_change()
    cvelistv5