DEBIAN-CVE-2026-53384

In the Linux kernel, the following vulnerability has been resolved:  serial: 8250dw: unregister 8250 port if clknotifierregister() fails  dw8250probe() registers the 8250 port via serial8250register8250port() and then, if the device has a clock, registers a clock notifier. If clknotifierregister() fails, probe returns the error but leaves the 8250 port registered. The matching serial8250unregisterport() lives in dw8250remove(), which is not called when probe fails, so the port slot stays occupied until the device is rebound or the system is rebooted. The devm-allocated driver data is freed while the port still references it (via the saved privatedata and serialin/serialout callbacks), so any access to that port slot before a rebind is a use-after-free hazard.  Unregister the port on the clknotifier_register() error path.