CVE-2026-93123

A flaw was found in the Linux kernel's qcom-geni serial driver. When the uart_flush_buffer() function is called after a Direct Memory Access (DMA) transfer completes but before its completion interrupt is processed, the transmit buffer can be reset. If new data is written to the buffer before the stale DMA completion is handled, the system may incorrectly process the old DMA transfer, leading to the unintended discarding of the new data. This can result in data loss or corruption of transmitted information.

This vulnerability is rated as Low impact because exploitation requires local access on systems equipped with specialized Qualcomm hardware, and the race condition only leads to dropped or corrupted serial output rather than memory corruption or privilege escalation. Qualcomm GENI serial interfaces are absent from standard enterprise server deployments and are primarily utilized on specific embedded or automotive platforms. Furthermore, triggering this condition demands precise timing between buffer flushes and interrupt processing during active serial transmission, limiting practical exploitability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.