Linux Kernel Vulnerability in AMBA PL011 Serial Interface

CVE-2026-80737

What is CVE-2026-80737?

A vulnerability in the Linux kernel's AMBA PL011 serial driver allows a condition where the transmit (TX) callback can access freed memory. This occurs because the dmaengine_terminate_all() function does not properly wait for a running TX callback, leading to potential data corruption or system instability. The RX poll timer may read from RX buffers without appropriate locking, increasing the risk of race conditions. Switching to dmaengine_terminate_sync() and ensuring the RX timer is removed before freeing buffers can mitigate this issue.

References