CVE-2026-74653

A flaw was found in the Linux kernel's 8250_of serial driver, specifically affecting NXP LPC32xx UARTs. A local user could repeatedly open a specific serial port, triggering a stuck RX character-timeout interrupt. This leads to an interrupt storm that can livelock the CPU, resulting in a Denial of Service (DoS).

This vulnerability is rated as Low impact because it strictly affects specialized NXP LPC32xx hardware platforms, which are not used in supported Red Hat Enterprise Linux environments. Exploitation additionally requires local access with permissions to repeatedly interact with the serial interface to induce an interrupt storm and CPU livelock. As a result, standard enterprise installations do not face practical operational risk under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.