CVE-2026-53384

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free hazard exists in the dw8250 probe() function. The function registers the 8250 port using serial8250 register 8250 port() and subsequently attempts to register a clock notifier via clk notifier register(). If clk notifier register() fails, the function returns an error without unregistering the 8250 port. Because the serial8250 unregister port() function is located in dw8250 remove(), which is not executed during a probe failure, the port slot remains occupied. Consequently, the driver data allocated via devm is freed while the port still maintains references to it through private data and serial in/serial out callbacks, leading to a potential use-after-free condition if the port slot is accessed before the device is rebound or the system is rebooted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.