CVE-2026-74652

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ

The RS485 trigger hrtimers are embedded in the devm-managed port and can fire after it is freed. The IRQ handler can arm a timer, so free the IRQ first and then cancel both timers.

Complete the RS485 stop without arming a timer, and cancel the timers in remove() for the suspend-then-unbind path, where shutdown is not called.

This issue was found by an in-house static analysis tool.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 2c1fd53af21b8cb13878b054894d33d3383eb1f3, < 759ead98a39fb625be302f9aa66290985dcaa325; >= 2c1fd53af21b8cb13878b054894d33d3383eb1f3, < e57f0aa5c35be37218ba0e4887b241584dd4b2d2; >= 2c1fd53af21b8cb13878b054894d33d3383eb1f3, < 36672c8d7d14e9c43287528455d2c97b526ea6ad
LinuxLinux6.14

References

Timeline

Published
Aug 22, 2026
Last modified
Oct 14, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-74653In the Linux kernel, the following vulnerability has been resolved: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP CVE-2026-74654In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dma: Clear stale RX state on shutdown serial8250_release_CVE-2026-746558.8In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcCVE-2026-746567.8In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib_nhc_update_mtu() fib_nhc_update_mtu() CVE-2026-74657In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops fib_nlmsg_size() stillCVE-2026-74658In the Linux kernel, the following vulnerability has been resolved: futex: Prevent robust futex exit race some more A robust futex unlock CVE-2026-74659In the Linux kernel, the following vulnerability has been resolved: net: bridge: mrp: fix uninitialised bytes on the wire br_mrp_alloc_tesCVE-2026-74668.8AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a useCVE-2026-746607.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_log_unregister() runs aCVE-2026-746617.8In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon worker mac802154_beaconCVE-2026-746629.8In the Linux kernel, the following vulnerability has been resolved: inet: frags: publish queues before arming timer inet_frag_create() armCVE-2026-746637.8In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies Deep qdisc hierarchies
CVE-2026-74652: High severity, CVSS 7.8 | Vulnix