CVE-2023-54220 — Missing Release of Resource after Effective Lifetime in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
serial: 8250: Fix oops for port->pm on uart_change_pm()
Unloading a hardware specific 8250 driver can produce error "Unable to
handle kernel paging request at virtual address" about ten seconds after
unloading the driver. This happens on uart_hangup() calling
uart_change_pm().
Turns out commit 04e82793f068 ("serial: 8250: Reinit port->pm on port
specific driver unbind") was only a partial fix. If the hardware specific
driver …
Affected Packages4 packages
▶CVEListV5linux/linux490bf37eaabb0a857ed1ae8e75d8854e41662f1c — 66f3e55960698c874b0598277913b478ecd29573+9
🔴Vulnerability Details
3OSV▶
CVE-2023-54220: In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port->pm on uart_change_pm() Unloading a hardware speci↗2025-12-30
GHSA▶
GHSA-ghxp-vq7f-3f7c: In the Linux kernel, the following vulnerability has been resolved:
serial: 8250: Fix oops for port->pm on uart_change_pm()
Unloading a hardware spe↗2025-12-30