CVE-2026-43061

MEDIUM EPSS 0.6%
Published May 5, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 5, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix TX deadlock when using DMA `dmaengine_terminate_async` does not guarantee that the `__dma_tx_complete` callback will run. The callback is currently the only place where `dma->tx_running` gets cleared. If the transaction is canceled and the callback never runs, then `dma->tx_running` will never get cleared and we will never schedule new TX DMA transactions again. This change makes it so we clear `dma->tx_running` after we terminate the DMA transaction. This is "safe" because `serial8250_tx_dma_flush` is holding the UART port lock. The first thing the callback does is also grab the UART port lock, so access to `dma->tx_running` is serialized.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
0.6% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-667

Affected Products 22

VendorProductVersionRange
linuxlinux_kernel*≥5.4.291  –  <5.5
linuxlinux_kernel*≥5.10.235  –  <5.10.253
linuxlinux_kernel*≥5.15.179  –  <5.15.203
linuxlinux_kernel*≥6.1.129  –  <6.1.167
linuxlinux_kernel*≥6.6.79  –  <6.6.130
linuxlinux_kernel*≥6.12.16  –  <6.12.78
linuxlinux_kernel*≥6.13.4  –  <6.14
linuxlinux_kernel*≥6.14.1  –  <6.18.20
linuxlinux_kernel*≥6.19  –  <6.19.10
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/2a72403b985aea6b4aac3171830492f9a387f9e1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5f6b17562f03fc65c7d3474ef8f1959b19d1ca41
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/79a19bd936bb35f56ef0ccab1b3b59ebce8c762d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8190f9ab6ad90cb97652adbebd238b874a4ef70d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a424a34b8faddf97b5af41689087e7a230f79ba7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b5ad887339503103d0fbe9827b16ad287597c275
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d2719a0a9c3439abf67843a5504b7afccd9ded93
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f76d91271bcacbd759a2e4ee3ea61faa6a727ccf
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/2a72403b985aea6b4aac3171830492f9a387f9e1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5f6b17562f03fc65c7d3474ef8f1959b19d1ca41
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/79a19bd936bb35f56ef0ccab1b3b59ebce8c762d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8190f9ab6ad90cb97652adbebd238b874a4ef70d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a424a34b8faddf97b5af41689087e7a230f79ba7
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b5ad887339503103d0fbe9827b16ad287597c275
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d2719a0a9c3439abf67843a5504b7afccd9ded93
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f76d91271bcacbd759a2e4ee3ea61faa6a727ccf
    Patch