CVE-2026-98883 serial: 8250_port: recognize UPIO_AU
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-98883?
CVE-2026-98883 is a vulnerability in Linux, published on 23 Oct 2026.
Official description
In the Linux kernel, the following vulnerability has been resolved:
serial: 8250_port: recognize UPIO_AU
My MIPS Alchemy systems generate the following warning during probe of the 8250 driver:
WARNING: drivers/tty/serial/8250/8250_port.c:462 at set_io_from_upio+0xfc/0x124, CPU#0: swapper/0/1 Unsupported UART type 4 [...] [<80521d40>] set_io_from_upio+0xfc/0x124 [<80521dfc>] serial8250_set_defaults+0x94/0xe0 [<80520fb4>] serial8250_register_8250_port+0x288/0x51c [<805214ec>] serial8250_probe+0x160/0x1e8 [<8053b5f0>] platform_probe+0x64/0x90
The least invasive fix is to recognize UPIO_AU (type 4) in set_io_from_upio() and do nothing, since all parameters have already been set up in 8250_rt288x.c::au_platform_setup().
Run-tested on Alchemy Au1300 platform.
Which versions are affected by CVE-2026-98883?
How do I fix CVE-2026-98883?
Upgrade to a fixed version.
Is CVE-2026-98883 being exploited?
There is no known exploitation of CVE-2026-98883 in the wild and no public exploit code.
Sources
Also known as AZL-110564, BELL-CVE-2026-98883, DEBIAN-CVE-2026-98883, GHSA-g9xp-whrx-5gjh, UBUNTU-CVE-2026-98883.