Description
In the Linux kernel, the following vulnerability has been resolved:

serial: 8250: fix possible ISR soft lockup

There are rare cases in which the host gets stuck in the ISR because it
is flooded with messages during the startup phase.

The reason for the soft lockup in the ISR is the missing FIFO error IRQ
(FIFOE) handling. Not handling it and reporting IRQ_HANDLED triggers
the IRQ immediately again.

Fix this by adding a check for the FIFOE status and clearing the FIFO
if no data is ready (DR).

This behavior was observed on an AM62L device which uses the OMAP 8250
driver. Fix it for all 8250 drivers, since the OMAP driver's special
IRQ setup handling may trigger this behavior more frequently, but it
is not ensured that other 8250 drivers aren't affected.
Published: 2026-09-24
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via kernel soft lockup
Action: Patch Now
AI Analysis

Impact

In Linux kernel 8250 serial drivers, a missing FIFO error interrupt handler can cause the ISR to repeatedly trigger, keeping the processor in a busy‑wait state. The kernel returns IRQ_HANDLED without clearing the FIFO error status, which re‑fires the IRQ and leads to a soft lockup. The resulting CPU is stuck in the ISR, making all processes unresponsive until a reboot. The flaw is reflected by CWE‑835 (Infinite Loop).

Affected Systems

The vulnerability occurs in any Linux kernel that includes the 8250 serial driver, including the specialised OMAP 8250 driver used on AM62L hardware. No explicit kernel version is cited, so any kernel prior to the commit that introduced FIFO error handling (identified by commit 0c6bf45e5a345cc3b9ffbeaf9083ecac3c2293eb) remains susceptible.

Risk and Exploitability

With a CVSS score of 5.5 the severity is moderate, and the EPSS score of < 1 % indicates a very low probability that the flaw is currently being exploited. The vulnerability is not listed in the CISA KEV catalog, so no publicly known exploits exist. Based on the description, it is inferred that the likely attack vector requires an attacker to send a burst of serial traffic during system boot or to have local access to the serial port, causing the FIFO error and triggering the ISR loop. Such an attack would result in a denial of service, forcing a system reboot to restore normal operation.

Generated by OpenCVE AI on October 1, 2026 at 19:21 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Adopt the kernel release that contains the 8250 ISR FIFO error handling fix (commit 0c6bf45e5a345cc3b9ffbeaf9083ecac3c2293eb).
  • Reboot the affected machines so the upgraded kernel is loaded and used for future boots.
  • Clean up any older kernel images that contain the unpatched 8250 driver to prevent accidental booting from vulnerable binaries.

Generated by OpenCVE AI on October 1, 2026 at 19:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4817-1 linux-6.12 security update
Debian DLA Debian DLA DLA-4841-1 linux security update
Debian DSA Debian DSA DSA-6528-1 linux security update
History

Sat, 03 Oct 2026 11:15:00 +0000


Thu, 01 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-404

Wed, 30 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-835
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low


Fri, 25 Sep 2026 08:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-404

Thu, 24 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR because it is flooded with messages during the startup phase. The reason for the soft lockup in the ISR is the missing FIFO error IRQ (FIFOE) handling. Not handling it and reporting IRQ_HANDLED triggers the IRQ immediately again. Fix this by adding a check for the FIFOE status and clearing the FIFO if no data is ready (DR). This behavior was observed on an AM62L device which uses the OMAP 8250 driver. Fix it for all 8250 drivers, since the OMAP driver's special IRQ setup handling may trigger this behavior more frequently, but it is not ensured that other 8250 drivers aren't affected.
Title serial: 8250: fix possible ISR soft lockup
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-03T10:58:45.270Z

Reserved: 2026-09-24T16:01:01.149Z

Link: CVE-2026-97481

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-24T17:17:25.583

Modified: 2026-10-03T11:17:57.987

Link: CVE-2026-97481

cve-icon Redhat

Severity : Low

Publid Date: 2026-09-24T00:00:00Z

Links: CVE-2026-97481 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T19:30:11Z

Weaknesses
  • CWE-835

    Loop with Unreachable Exit Condition ('Infinite Loop')