Linux Kernel Vulnerability in Serial8250 Component

CVE-2025-39724

What is CVE-2025-39724?

A vulnerability in the Linux kernel's Serial8250 component was identified, where triggering conditions related to PSLVERR_RESP_EN could lead to system instability. If the device tries to read from an empty Receive Buffer Register (RBR) while the FIFO is enabled, it generates an error response. The issue surfaces during the startup sequence of the Serial8250, potentially causing a panic if concurrent CPU access interferes with the UART operation. To mitigate this, it's essential to implement port locking during the write operations to the UART Line Control Register.

References