CVE-2026-43061: serial: 8250: Fix TX deadlock when using DMA

Published May 5, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

serial: 8250: Fix TX deadlock when using DMA

dmaengineterminateasync does not guarantee that the dmatxcomplete callback will run. The callback is currently the only place where dma->txrunning gets cleared. If the transaction is canceled and the callback never runs, then dma->txrunning will never get cleared and we will never schedule new TX DMA transactions again.

This change makes it so we clear dma->txrunning after we terminate the DMA transaction. This is "safe" because serial8250txdmaflush is holding the UART port lock. The first thing the callback does is also grab the UART port lock, so access to dma->txrunning is serialized.

Affected Software

23 affected components
Linux Foundation Linux Kernel
Linux Linux kernel>=5.4.291<5.5
Linux Linux kernel>=5.10.235<5.10.253
Linux Linux kernel>=5.15.179<5.15.203
Linux Linux kernel>=6.1.129<6.1.167
Linux Linux kernel>=6.6.79<6.6.130
Linux Linux kernel>=6.12.16<6.12.78
Linux Linux kernel>=6.13.4<6.14
Linux Linux kernel>=6.14.1<6.18.20
Linux Linux kernel>=6.19<6.19.10
Linux Linux kernel=6.14
Linux Linux kernel=6.14-rc3
Linux Linux kernel=6.14-rc4
Linux Linux kernel=6.14-rc5
Linux Linux kernel=6.14-rc6
Linux Linux kernel=6.14-rc7
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4
Linux Linux kernel=7.0-rc5
Linux Linux kernel=7.0-rc6
Linux Linux kernel=7.0-rc7

Event History

May 5, 2026
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
Description
Data Sourced
via NVD·04:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-43061?

CVE-2026-43061 has been classified as a high severity vulnerability due to potential TX deadlock issues affecting DMA in the Linux kernel.

2

How do I fix CVE-2026-43061?

To resolve CVE-2026-43061, apply the latest patches or updates provided by the Linux Foundation for the affected Linux kernel versions.

3

What systems are affected by CVE-2026-43061?

CVE-2026-43061 affects systems running the Linux kernel with the 8250 serial driver that utilizes DMA.

4

What are the risks associated with CVE-2026-43061?

The risks associated with CVE-2026-43061 include potential system hangs or crashes due to TX deadlocks in serial communication.

5

Has CVE-2026-43061 been reported in any exploits?

As of now, there are no public reports of active exploits specifically targeting CVE-2026-43061.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203