Description
In the Linux kernel, the following vulnerability has been resolved:

serial: msm: Disable DMA for kernel console UART

At the moment, concurrent writes from userspace and the kernel to the
console can trigger a race condition that results in an infinite loop of
the same messages printed over and over again. This is most likely to
happen during system startup or shutdown when the init system starts/stops
a large number of system services that interact with various kernel code.

When userspace writes to the TTY device, the driver initiates an
asynchronous DMA transfer and releases the port lock. At the same moment,
the kernel printk path might grab the port lock and re-configure the UART
controller for PIO, without waiting for the DMA operation to complete. It
seems like this collision results in zero progress being reported for the
DMA engine, so the same text is printed to the console over and over again.

For the kernel console, we want a reliable output path that will be
functional even during crashes etc. So rather than implementing complex
code to synchronize the kernel console write routines with the userspace
DMA write routines, simply disable DMA for the console UART instance.

Similar checks exist in many other serial drivers, e.g. 8250_port.c,
imx.c, sh-sci.c etc.
Published: 2026-09-04
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The defect is a race condition between user-space writes to a serial terminal and the kernel printk routine. When userspace initiates an asynchronous DMA transfer to the UART, the driver releases the port lock. At the same time, the kernel printk code may seize the lock and reconfigure the UART for programmed I/O without waiting for the DMA to finish. The result is that the console driver reports that no progress has been made on the DMA engine, which causes the same message to be retransmitted repeatedly. This infinite loop consumes CPU and console bandwidth, making the system unresponsive during boot or shutdown and effectively denying legitimate console output. The vulnerability is a classic concurrency flaw, classified as CWE‑362.

Affected Systems

The issue appears in Linux kernels that load the msm serial driver for console UARTs. All kernel versions prior to the commit that disables DMA for the console instance are affected; the exact range is not listed in the data but includes any kernels that have not applied the patch. The environment is typically embedded or mobile platforms that provide a serial console over MSM UART hardware.

Risk and Exploitability

No CVSS score is supplied, and the EPSS score is unavailable, so the quantitative likelihood of exploitation is unknown. The bug can only be triggered by a local process that owns a TTY device on the affected console, so it does not provide remote code execution. It is not listed in the CISA KEV catalog. The practical risk is primarily the potential for a denial‑of‑service condition during system startup or shutdown, which could be leveraged by a privileged user to disrupt system operation or mask other signs of compromise. The attack vector is inferred to be local userspace writes that coincide with kernel printk activity.

Generated by OpenCVE AI on September 4, 2026 at 19:49 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the kernel patch that disables DMA for the MSM UART console driver, as introduced in the referenced commits
  • Before patching, verify that the console driver configuration uses the msm serial port by checking dmesg or /sys/class/tty logs
  • If the patch is not available for your distribution, consider temporarily disabling DMA for the console via a kernel configuration knob or by adjusting the device tree to set the "dma‑enable" flag to false
  • During critical startup or shutdown scripts, redirect console output to a non-pty device (e.g., using "setterm -powerdown" or similar) to avoid concurrent writes

Generated by OpenCVE AI on September 4, 2026 at 19:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 04 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362

Fri, 04 Sep 2026 17:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: serial: msm: Disable DMA for kernel console UART At the moment, concurrent writes from userspace and the kernel to the console can trigger a race condition that results in an infinite loop of the same messages printed over and over again. This is most likely to happen during system startup or shutdown when the init system starts/stops a large number of system services that interact with various kernel code. When userspace writes to the TTY device, the driver initiates an asynchronous DMA transfer and releases the port lock. At the same moment, the kernel printk path might grab the port lock and re-configure the UART controller for PIO, without waiting for the DMA operation to complete. It seems like this collision results in zero progress being reported for the DMA engine, so the same text is printed to the console over and over again. For the kernel console, we want a reliable output path that will be functional even during crashes etc. So rather than implementing complex code to synchronize the kernel console write routines with the userspace DMA write routines, simply disable DMA for the console UART instance. Similar checks exist in many other serial drivers, e.g. 8250_port.c, imx.c, sh-sci.c etc.
Title serial: msm: Disable DMA for kernel console UART
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-04T16:49:35.864Z

Reserved: 2026-08-26T14:34:25.799Z

Link: CVE-2026-80886

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-04T17:17:01.310

Modified: 2026-09-04T17:17:01.310

Link: CVE-2026-80886

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-04T20:00:07Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')