PT-2026-64759 · Linux+1 · Linux Kernel+1

CVE-2026-64528

·

Published

2026-07-25

·

Updated

2026-09-07

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock occurs in the Samsung serial driver when console flow control is enabled via UPF CONS FLOW. The issue arises because the functions s3c24xx serial stop tx() and s3c24xx serial start tx() are called while the port->lock spinlock is already held by the serial core framework or internal driver paths, such as the s3c24xx serial tx dma complete() DMA TX completion handler or the s3c24xx serial tx irq() PIO TX IRQ handler. Subsequently, the helper functions s3c24xx serial rx enable() and s3c24xx serial rx disable() attempt to acquire the same port->lock using uart port lock irqsave(). Because spinlocks are not recursive, this redundant acquisition leads to a deadlock on the CPU.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-64528
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu