CVE-2025-38262

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A concurrency race condition can occur when two instances of uart devices are probing. If one thread calls the uart register driver function, which allocates memory for the uart state member of the uart driver structure, the other instance can bypass driver registration and call ulite assign. This calls uart add one port, expecting the driver to be fully initialized, leading to a kernel panic due to a null pointer dereference. The issue is resolved by moving uart driver registration into the init function to ensure the driver is always registered when the probe function is called.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.