In the Linux kernel, the following vulnerability has been resolved:

serial: imx: Introduce timeout when waiting on transmitter empty

By waiting at most 1 second for USR2_TXDC to be set, we avoid a potential
deadlock.

In case of the timeout, there is not much we can do, so we simply ignore
the transmitter state and optimistically try to continue.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00008.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
9ec1882df244c4ee1baa692676fef5e8b0f5487d affected
< 7f2b9ab6d0b26f16cd38dd9fd91d51899635f7c7
9ec1882df244c4ee1baa692676fef5e8b0f5487d affected
< 7f9e70c68b7ace0141fe3bc94bf7b61296b71916
9ec1882df244c4ee1baa692676fef5e8b0f5487d affected
< 982ae3376c4c91590d38dc8a676c10f7df048a44
9ec1882df244c4ee1baa692676fef5e8b0f5487d affected
< 53b2c95547427c358f45515a9f144efee95e3701
9ec1882df244c4ee1baa692676fef5e8b0f5487d affected
< e533e4c62e9993e62e947ae9bbec34e4c7ae81c2
c096552004244868391b29f319ea8889d55abe19 affected
—
86236252d2449313bdbac790023cbc957bf6e426 affected
—
34d4dda865d8174f4a437f313c457c42a8fa9535 affected
—
Linux Linux affected
Version Status Constraints
3.6 affected
—
0 unaffected
< 3.6
5.15.162 unaffected
≤ 5.15.*
6.1.96 unaffected
≤ 6.1.*
6.6.36 unaffected
≤ 6.6.*
6.9.7 unaffected
≤ 6.9.*
6.10 unaffected
≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4008-1 linux-6.1 security update
Debian DSA Debian DSA DSA-5731-1 linux security update
Ubuntu USN Ubuntu USN USN-6999-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6999-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7004-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7005-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7005-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7007-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7007-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7007-3 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7008-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7009-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7009-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7019-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7029-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7234-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7234-2 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-7234-3 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-7234-4 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-7234-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7295-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-7413-1 Linux kernel (IoT) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/53b2c95547427c358f45515a9f144efee95e3701 cve-icon cve-icon
https://git.kernel.org/stable/c/7f2b9ab6d0b26f16cd38dd9fd91d51899635f7c7 cve-icon cve-icon
https://git.kernel.org/stable/c/7f9e70c68b7ace0141fe3bc94bf7b61296b71916 cve-icon cve-icon
https://git.kernel.org/stable/c/982ae3376c4c91590d38dc8a676c10f7df048a44 cve-icon cve-icon
https://git.kernel.org/stable/c/e533e4c62e9993e62e947ae9bbec34e4c7ae81c2 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024071227-CVE-2024-40967-665f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-40967 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-40967 cve-icon
History

Mon, 03 Nov 2025 22:30:00 +0000

Type Values Removed Values Added
References

Wed, 13 Nov 2024 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 09 Sep 2024 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-667
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T10:36:56.899Z

Reserved: 2024-07-12T12:17:45.602Z

Link: CVE-2024-40967

cve-icon Vulnrichment

Updated: 2025-11-03T21:58:31.769Z

cve-icon NVD

Status : Modified

Published: 2024-07-12T13:15:18.480

Modified: 2025-11-03T22:17:18.620

Link: CVE-2024-40967

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-12T00:00:00Z

Links: CVE-2024-40967 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses