CVE-2026-53384

Analyzed Analyzed - Analysis Complete

Linux Kernel 8250 Port Use-After-Free

Publication date: 2026-07-19

Last updated on: 2026-08-07

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port via serial8250_register_8250_port() and then, if the device has a clock, registers a clock notifier. If clk_notifier_register() fails, probe returns the error but leaves the 8250 port registered. The matching serial8250_unregister_port() lives in dw8250_remove(), which is not called when probe fails, so the port slot stays occupied until the device is rebound or the system is rebooted. The devm-allocated driver data is freed while the port still references it (via the saved private_data and serial_in/serial_out callbacks), so any access to that port slot before a rebind is a use-after-free hazard. Unregister the port on the clk_notifier_register() error path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-08-07

Generated

2026-08-09

AI Q&A

2026-07-19

EPSS Evaluated

2026-08-08

NVD

CVE-2026-53384

EUVD

EUVD-2026-45506

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.2 (inc) to 6.6.144 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.95 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.14 (exc)
linux	linux_kernel	From 7.1 (inc) to 7.1.2 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.38 (exc)
linux	linux_kernel	From 5.19 (inc) to 6.1.177 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper cleanup during device probe. When the 8250_dw serial driver fails to register a clock notifier, it leaves the serial port registered even though the probe operation failed. This creates a use-after-free hazard where the port slot remains occupied until a system reboot or device rebind, potentially allowing access to freed memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's 8250 serial driver and may not have direct network detection methods. Check kernel logs for errors related to serial port initialization or clock notifier failures using 'dmesg | grep -i serial' or 'journalctl -k | grep -i serial'.

Impact Analysis

This could lead to system instability or crashes if the affected serial port is accessed after the driver data is freed. An attacker with local access might exploit this to execute arbitrary code or cause denial-of-service conditions on systems using the dw8250 serial driver with clock notifiers.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA. It is a use-after-free hazard in the Linux kernel's serial port handling, which could lead to system instability or crashes but does not involve data exposure or privacy violations typical of compliance concerns.

Mitigation Strategies

Apply the latest kernel update from your distribution to patch this issue. If immediate patching is not possible, avoid using affected serial devices until the update is applied. Rebooting the system may temporarily resolve the issue by clearing the use-after-free state.

Hi! I’m here to help you understand CVE-2026-53384. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70