{"id":"CVE-2026-90337","summary":"serial: core: do fallible allocations before the console can be registered","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nserial: core: do fallible allocations before the console can be registered\n\nserial_core_add_one_port() allocates uport-\u003etty_groups after\nuart_configure_port(), which may register the console. If the allocation\nfails, the driver unwinds the port while its console remains registered.\nThe earlier uport-\u003ename allocation has a related failure path that leaves\nstate-\u003euart_port linked to a port being freed.\n\nFailslab reproduced a NULL dereference in PL011 console output and a KASAN\nuse-after-free in i.MX console output after failed binds.\n\nAllocate the name and tty_groups before linking the port and configuring\nit. Reserve space for the optional driver attribute group because\nconfig_port() may populate uport-\u003eattr_group during configuration.","modified":"2026-09-19T03:47:30.863228574Z","published":"2026-09-17T16:08:49.687Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90337.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1a0e4fbce5d9c1bc179a35a2fd9ed142664299e3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c2aec15f78b2e6ccd9b94216a901248511355982"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90337.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90337"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"266dcff03eed0050b6af11aaf2a61ab837d7ba3f"},{"fixed":"c2aec15f78b2e6ccd9b94216a901248511355982"},{"fixed":"1a0e4fbce5d9c1bc179a35a2fd9ed142664299e3"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90337.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"7.2.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90337.json"}}],"schema_version":"1.9.0"}