CVE EVIDENCE REVIEW
ReviewHighEvidence review

CVE-2026-74655 evidence review

Linux

In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uart_ops does not provide a flush_buffer callback, so an in-flight transfer can complete after serial core has reset the transmit kfifo, underflowing its length and resubmitting page-sized transfers indefinitely. Add one that stops the transfer and clears tx_remaining and tx_queued. The stop path was also broken: it unmapped the buffer whi...

Open CVE record
Evidence review

This record remains available for product and version identification, but it is not presented as a complete remediation procedure. Confirm the affected range and the supported fix in a direct vendor advisory before changing production systems.

ProductLinux
Affected versions>= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 1606abb7ce8c0cfef98c7e556b83c14e5d73c1bf, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 313ae287442e5e8d3f7b53b73f37d384bda072d0, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 1c31e2377f4c1bb110ca7f6e597b2253a7440c37, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < b1801c0d40f62778b613334de5840aba10a564d5, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < e3c04834ae1ab5e9cfbe8ac54ec734aa4774249d, >= 6.3
Fixed versionsNo verified fixed-version field is available yet
Priority basisReview · CVSS 8.8 · EPSS -
01

Identify the product and installed version

Record whether Linux is present, where it is installed, and which interfaces are exposed.

  • Record the product name, package or appliance identifier, and installed version.
  • Identify internet-facing, administrative, API, and internal access paths.
  • Preserve the pre-change configuration and relevant service logs.
02

Compare the affected range

Use the current record as an identification aid: >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 1606abb7ce8c0cfef98c7e556b83c14e5d73c1bf, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 313ae287442e5e8d3f7b53b73f37d384bda072d0, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < 1c31e2377f4c1bb110ca7f6e597b2253a7440c37, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < b1801c0d40f62778b613334de5840aba10a564d5, >= 2aaa43c7077833301c237684cd7bc9ae5e3dec95 < e3c04834ae1ab5e9cfbe8ac54ec734aa4774249d, >= 6.3. Resolve incomplete inventory results before deciding that an asset is unaffected.

03

Verify the authoritative remediation source

Open the linked source material and locate a direct vendor advisory for this CVE. Confirm the supported fixed release and product-specific update path before making a production change.

Operational boundary

This page does not replace the vendor advisory, support contract, change-management process, or recovery plan. Do not infer that an asset is unaffected from an incomplete inventory query or a missing fixed-version field.