CVE-2024-38634

serial: max3100: Lock port->lock when calling uart_handle_cts_change()

State: Published
Severity: Not scored
Published: Jun 21, 2024
Updated: May 11, 2026
Reserved: Jun 18, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

serial: max3100: Lock port->lock when calling uart_handle_cts_change()

uart_handle_cts_change() has to be called with port lock taken, Since we run it in a separate work, the lock may not be taken at the time of running. Make sure that it's taken by explicitly doing that. Without it we got a splat:

WARNING: CPU: 0 PID: 10 at drivers/tty/serial/serial_core.c:3491 uart_handle_cts_change+0xa6/0xb0 ... Workqueue: max3100-0 max3100_work [max3100] RIP: 0010:uart_handle_cts_change+0xa6/0xb0 ... max3100_handlerx+0xc5/0x110 [max3100] max3100_work+0x12a/0x340 [max3100]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 44b38924135d2093e2ec1812969464845dd66dc9Affected 7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before ea9b35372b58ac2931bfc1d5bc25e839d1221e30Affected 7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before cc121e3722a0a2c8f716ef991e5425b180a5fb94Affected 7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 78dbda51bb4241b88a52d71620f06231a341f9baAffected 7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 8296bb9e5925b6634259c5d4daee88f0cc0884ecAffected 7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 93df2fba6c7dfa9a2f08546ea9a5ca4728758458Affected 7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 865b30c8661924ee9145f442bf32cea549faa869Affected 7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 77ab53371a2066fdf9b895246505f5ef5a4b5d47Affected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 4.19.316 through 4.19.Not affected 5.4.278 through 5.4.Not affected 5.10.219 through 5.10.Not affected 5.15.161 through 5.15.Not affected 6.1.93 through 6.1.Not affected 6.6.33 through 6.6.Not affected 6.9.4 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 44b38924135d2093e2ec1812969464845dd66dc9Affected
7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before ea9b35372b58ac2931bfc1d5bc25e839d1221e30Affected
7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before cc121e3722a0a2c8f716ef991e5425b180a5fb94Affected
7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 78dbda51bb4241b88a52d71620f06231a341f9baAffected
7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 8296bb9e5925b6634259c5d4daee88f0cc0884ecAffected
7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 93df2fba6c7dfa9a2f08546ea9a5ca4728758458Affected
7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 865b30c8661924ee9145f442bf32cea549faa869Affected
7831d56b0a3544cbb6f82f76c34ca95e24d5b676 to before 77ab53371a2066fdf9b895246505f5ef5a4b5d47Affected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
4.19.316 through 4.19.*Not affected
5.4.278 through 5.4.*Not affected
5.10.219 through 5.10.*Not affected
5.15.161 through 5.15.*Not affected
6.1.93 through 6.1.*Not affected
6.6.33 through 6.6.*Not affected
6.9.4 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.