CVE-2026-97480

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the serial8250 register 8250 port() function where uart->port.dev is conditionally copied from up->port.dev only if the latter is non-NULL. If both the existing uart slot and up have a NULL dev, uart->port.dev remains NULL. Subsequently, the has acpi companion() function dereferences this NULL pointer when accessing dev->fwnode without a proper guard, leading to a kernel NULL-dereference. This occurs during the initialization process for callers that legitimately have no parent device, such as legacy non-OF/non-ACPI registrations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.