{"id":21662,"date":"2026-09-12T04:31:29","date_gmt":"2026-09-11T20:31:29","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-89740"},"modified":"2026-09-12T04:31:29","modified_gmt":"2026-09-11T20:31:29","slug":"cve-2026-89740","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-89740","title":{"rendered":"CVE-2026-89740 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nserial: imx: serializ"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>serial: imx: serialize imx_uart_ports[] lifetime<\/p>\n<p>imx_uart_probe() publishes its devm-allocated port in imx_uart_ports[]<br \/>\nbefore uart_add_one_port() because console setup uses the table. The entry<br \/>\nis not cleared when adding the port fails or after removal, leaving a<br \/>\ndangling pointer.<\/p>\n<p>A sibling probe can register the shared console through that stale entry.<br \/>\nThis was reproduced under KASAN on QEMU mcimx6ul-evk by unbinding a<br \/>\nsibling UART, unbinding the console UART and rebinding the sibling.<\/p>\n<p>Keep the entry valid through uart_remove_one_port(), then clear it. Protect<br \/>\nport addition and removal together with their table updates so sibling<br \/>\noperations cannot interleave. Reject an occupied slot rather than<br \/>\nclobbering an active port during a duplicate-line probe.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>serial: imx: serialize imx_uart_ports[] lifetime<\/p>\n<p>imx_uart_probe() publishes its devm-allocated port in imx_uart_ports[]<br \/>\nbefore uar<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-21662","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/21662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21662"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21662"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}