SECUFOCUSNOW
Home›CVE index›CVE-2026-74655
ReviewHigh

CVE-2026-74655

Linux

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uart_ops does not provide a flush_buffer callback, so an in-flight transfer can complete after serial core has reset the transmit kfifo, underflowing its length and resubmitting page-sized transfers indefinitely. Add one that stops the transfer and clears tx_remaining and tx_queued. The stop path was also broken: it unmapped the buffer whi...

CVSS
8.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.08.23
PRIORITY ASSESSMENT

Review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 8.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uart_ops does not provide a flush_buffer callback, so an in-flight transfer can complete after serial core has reset the transmit kfifo, underflowing its length and resubmitting page-sized transfers indefinitely. Add one that stops the transfer and clears tx_remaining and tx_queued. The stop path was also broken: it unmapped the buffer whi...

Affected product and versions

Product
Linux
Affected versions
>= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 1606abb7ce8c0cfef98c7e556b83c14e5d73c1bf, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 313ae287442e5e8d3f7b53b73f37d384bda072d0, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 1c31e2377f4c1bb110ca7f6e597b2253a7440c37, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < b1801c0d40f62778b613334de5840aba10a564d5, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < e3c04834ae1ab5e9cfbe8ac54ec734aa4774249d, >= 6.3
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE
Not available