CVE-2023-52567

serial: 8250_port: Check IRQ data before use

State: Published
Severity: Not scored
Published: Mar 2, 2024
Updated: May 23, 2026
Reserved: Mar 2, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250_port: Check IRQ data before use

In case the leaf driver wants to use IRQ polling (irq = 0) and IIR register shows that an interrupt happened in the 8250 hardware the IRQ data can be NULL. In such a case we need to skip the wake event as we came to this path from the timer interrupt and quite likely system is already awake.

Without this fix we have got an Oops:

serial8250: ttyS0 at I/O 0x3f8 (irq = 0, base_baud = 115200) is a 16550A ... BUG: kernel NULL pointer dereference, address: 0000000000000010 RIP: 0010:serial8250_handle_irq+0x7c/0x240 Call Trace: ? serial8250_handle_irq+0x7c/0x240 ? __pfx_serial8250_timeout+0x10/0x10

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	edfe57aedff4ecf3606533aabf8ecf7676c3c5d9 to before ee5732caaffba3a37e753fdb89b4958db9a61847Affected 0bd49a043c7984c93c2a0af41222fb71c3986a4e to before c334650150c29234b0923476f51573ae1b2f252aAffected 572d48361aa0a6e6f16c1470e5407de183493d0c to before bf3c728e3692cc6d998874f0f27d433117348742Affected d5d628fea5f6181809a9d61b04de6ade53277684 to before e14afa4450cb7e4cf93e993a765801203d41d014Affected 424cf29296354d7b9c6c038aaa7bb71782100851 to before 2b837f13a818f96304736453ac53b66a70aaa4f2Affected 727e92fe13e81c6088a88d83e466b2b1b553c4e3 to before e14f68a48fd445a083ac0750fafcb064df5f18f7Affected 0ba9e3a13c6adfa99e32b2576d20820ab10ad48a to before 3345cc5f02f1fb4c4dcb114706f2210d879ab933Affected 0ba9e3a13c6adfa99e32b2576d20820ab10ad48a to before cce7fc8b29961b64fadb1ce398dc5ff32a79643bAffected d7c6aa39eb041e2a6a53106104200d11e2acc87fAffected f5fd2fd999b364801e9790c6f69f3fe3f40ed60fAffected 4.14.315 to before 4.14.327Affected 4.19.283 to before 4.19.296Affected 5.4.243 to before 5.4.258Affected 5.10.180 to before 5.10.198Affected 5.15.111 to before 5.15.134Affected 6.1.28 to before 6.1.56Affected 6.2.15 to before 6.3Affected 6.3.2 to before 6.4Affected
LinuxLinux	6.4Affected before 6.4Not affected 4.14.327 through 4.14.Not affected 4.19.296 through 4.19.Not affected 5.4.258 through 5.4.Not affected 5.10.198 through 5.10.Not affected 5.15.134 through 5.15.Not affected 6.1.56 through 6.1.Not affected 6.5.6 through 6.5.*Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

edfe57aedff4ecf3606533aabf8ecf7676c3c5d9 to before ee5732caaffba3a37e753fdb89b4958db9a61847Affected
0bd49a043c7984c93c2a0af41222fb71c3986a4e to before c334650150c29234b0923476f51573ae1b2f252aAffected
572d48361aa0a6e6f16c1470e5407de183493d0c to before bf3c728e3692cc6d998874f0f27d433117348742Affected
d5d628fea5f6181809a9d61b04de6ade53277684 to before e14afa4450cb7e4cf93e993a765801203d41d014Affected
424cf29296354d7b9c6c038aaa7bb71782100851 to before 2b837f13a818f96304736453ac53b66a70aaa4f2Affected
727e92fe13e81c6088a88d83e466b2b1b553c4e3 to before e14f68a48fd445a083ac0750fafcb064df5f18f7Affected
0ba9e3a13c6adfa99e32b2576d20820ab10ad48a to before 3345cc5f02f1fb4c4dcb114706f2210d879ab933Affected
0ba9e3a13c6adfa99e32b2576d20820ab10ad48a to before cce7fc8b29961b64fadb1ce398dc5ff32a79643bAffected
d7c6aa39eb041e2a6a53106104200d11e2acc87fAffected
f5fd2fd999b364801e9790c6f69f3fe3f40ed60fAffected
4.14.315 to before 4.14.327Affected
4.19.283 to before 4.19.296Affected
5.4.243 to before 5.4.258Affected
5.10.180 to before 5.10.198Affected
5.15.111 to before 5.15.134Affected
6.1.28 to before 6.1.56Affected
6.2.15 to before 6.3Affected
6.3.2 to before 6.4Affected

LinuxLinux

6.4Affected
before 6.4Not affected
4.14.327 through 4.14.*Not affected
4.19.296 through 4.19.*Not affected
5.4.258 through 5.4.*Not affected
5.10.198 through 5.10.*Not affected
5.15.134 through 5.15.*Not affected
6.1.56 through 6.1.*Not affected
6.5.6 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.