CVE-2025-39724

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERR_RESP_EN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR (Receive Buffer Register) while the FIFO is enabled. In serial8250_do_startup(), calling serial_port_out(port, UART_LCR, UART_LCR_WLEN8) triggers dw8250_check_lcr(), which invokes dw8250_force_idle() and serial8250_clear_and_reinit_fifos(). The latter function enables the FIFO via serial_out(p, UART_FCR, p->fcr). Execution proceeds to the serial_port_in(port, UART_RX). This satisfies the PSLVERR trigger condition. When another CPU (e.g., using printk()) is accessing the UART (UART is busy), the current CPU fails the check (value & ~UART_LCR_SPAR) == (lcr & ~UART_LCR_SPAR) in dw8250_check_lcr(), causing it to enter dw8250_force_idle(). Put serial_port_out(port, UART_LCR, UART_LCR_WLEN8) under the port->lock to fix this issue. Panic backtrace: [ 0.442336] Oops - unknown exception [#1] [ 0.442343] epc : dw8250_serial_in32+0x1e/0x4a [ 0.442351] ra : serial8250_do_startup+0x2c8/0x88e ... [ 0.442416] console_on_rootfs+0x26/0x70

• https://git.kernel.org/stable/c/0b882f00655afefbc7729c6b5aec86f7a5473a3dPatch
• https://git.kernel.org/stable/c/38c0ea484dedb58cb3a4391229933e16be0d1031Patch
• https://git.kernel.org/stable/c/68c4613e89f000e8198f9ace643082c697921c9fPatch
• https://git.kernel.org/stable/c/7f8fdd4dbffc05982b96caf586f77a014b2a9353Patch
• https://git.kernel.org/stable/c/8e2739478c164147d0774802008528d9e03fb802Patch
• https://git.kernel.org/stable/c/b8ca8e3f75ede308b4d49a6ca5081460be01bdb5Patch
• https://git.kernel.org/stable/c/c826943abf473a3f7260fbadfad65e44db475460Patch
• https://git.kernel.org/stable/c/cb7b3633ed749db8e56f475f43c960652cbd6882Patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlMailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Published

Sep 5, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-39719In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-3972A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-39720In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39721In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39722In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39723In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-39725In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39726In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-39727In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-39728In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-39729In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3973A vulnerability, which was classified as critical, was found…9.8