{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.6-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  tty: serial: 8250: protect against NULL uart-\u003eport.dev in register  serial8250_register_8250_port() conditionally copies uart-\u003eport.dev from up-\u003eport.dev only when up-\u003eport.dev is non-NULL:  \tif (up-\u003eport.dev) { \t\tuart-\u003eport.dev = up-\u003eport.dev; \t\t... \t}  So if both the existing uart slot and up have a NULL -\u003edev, uart-\u003eport.dev remains NULL. The very next ACPI companion check then dereferences it unconditionally:  \tif (!has_acpi_companion(uart-\u003eport.dev)) {  has_acpi_companion() reads dev-\u003efwnode without a NULL guard (include/linux/acpi.h), so this NULL-derefs the kernel for the remaining no-dev case rather than just skipping the mctrl_gpio_init() initialisation as intended.  smatch flags the inconsistency:    drivers/tty/serial/8250/8250_core.c:767   serial8250_register_8250_port() error: 'uart-\u003eport.dev' could be   null (see line 719)  Guard the call with a NULL check so register continues to work for callers that legitimately have no parent device (legacy non-OF/non-ACPI registrations).  No functional change for callers that pass a non-NULL -\u003edev.",
  "id": "DEBIAN-CVE-2026-97480",
  "modified": "2026-09-25T04:47:33.838256166Z",
  "published": "2026-09-24T17:17:25.467Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-97480"
    }
  ],
  "upstream": [
    "CVE-2026-97480"
  ]
}