CVE-2023-54220: Linux

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix oops for port->pm on uart_change_pm() Unloading a hardware specific 8250 driver can produce error "Unable to handle kernel paging request at virtual address" about ten seconds after unloading the driver. This happens on uart_hangup() calling uart_change_pm(). Turns out commit 04e82793f068 ("serial: 8250: Reinit port->pm on port specific driver unbind") was only a partial fix. If the hardware specific driver has initialized port->pm function, we need to clear port->pm too. Just reinitializing port->ops does not do this. Otherwise serial8250_pm() will call port->pm() instead of serial8250_do_pm().

Affected products

• Linux Linux: from 4.14.316, before 4.14.324 (fixed in 4.14.324); from 4.19.284, before 4.19.293 (fixed in 4.19.293); from 5.4.244, before 5.4.255 (fixed in 5.4.255); from 5.10.181, before 5.10.192 (fixed in 5.10.192); from 5.15.113, before 5.15.128 (fixed in 5.15.128); from 6.1.30, before 6.1.47 (fixed in 6.1.47); …

Published 2025-12-30. Last modified 2026-08-04.