Deadlock Vulnerability in Samsung Serial Driver of Linux Kernel

CVE-2026-64528

What is CVE-2026-64528?

A deadlock vulnerability has been identified in the Samsung serial driver of the Linux kernel. This issue arises when console flow control is engaged, leading to a situation where the port's spinlock is redundantly acquired. Specifically, the functions responsible for enabling and disabling serial reception attempt to acquire the same lock again, causing a deadlock on the CPU. This issue can significantly impact system operations, particularly those related to console interactions and serial communications. Developers should ensure that redundant lock acquisitions are removed from the related driver functions to mitigate this vulnerability.

References