CVE-2023-54220

Linux Kernel DoS via uart_change_pm()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port->pm on uart_change_pm() Unloading a hardware specific 8250 driver can produce error "Unable to handle kernel paging request at virtual address" about ten seconds after unloading the driver. This happens on uart_hangup() calling uart_change_pm(). Turns out commit 04e82793f068 ("serial: 8250: Reinit port->pm on port specific driver unbind") was only a partial fix. If the hardware specific driver has initialized port->pm function, we need to clear port->pm too. Just reinitializing port->ops does not do this. Otherwise serial8250_pm() will call port->pm() instead of serial8250_do_pm().

Scores

EPSS 0.0018
EPSS Percentile 8.2%

Details

Status published
Products (33)
linux/Kernel < 4.14.324linux
linux/Kernel 4.15.0 - 4.19.293linux
linux/Kernel 4.20.0 - 5.4.255linux
linux/Kernel 5.11.0 - 5.15.128linux
linux/Kernel 5.16.0 - 6.1.47linux
linux/Kernel 5.5.0 - 5.10.192linux
linux/Kernel 6.2.0 - 6.4.12linux
Linux/Linux < 6.4
Linux/Linux 04e82793f068d2f0ffe62fcea03d007a8cdc16a7 - 375806616f8c772c33d40e112530887b37c1a816
Linux/Linux 04e82793f068d2f0ffe62fcea03d007a8cdc16a7 - dfe2aeb226fd5e19b0ee795f4f6ed8bc494c1534
... and 23 more
Published Dec 30, 2025
Tracked Since Feb 18, 2026