CVE-2026-74654

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the serial: 8250 dma component where the serial8250 release dma() function terminates RX DMA and releases the channel but fails to clear the rx running state. If a port is closed during an active RX transfer, this stale state persists while rxchan is NULL. During a subsequent reopen, the DesignWare BUSY workaround calls serial8250 rx dma flush() via the LCR write path before a new RX channel is obtained through serial8250 request dma(). This sequence causes a NULL channel to be passed to dmaengine pause(), resulting in a kernel Oops (a fatal kernel error).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.