-

CVE-2023-53551

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: u_serial: Add null pointer check in gserial_resume

Consider a case where gserial_disconnect has already cleared
gser->ioport. And if a wakeup interrupt triggers afterwards,
gserial_resume gets called, which will lead to accessing of
gser->ioport and thus causing null pointer dereference.Add
a null pointer check to prevent this.

Added a static spinlock to prevent gser->ioport from becoming
null after the newly added check.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < c5360eec648bd506afa304ae4a71f82e13d41897
Version aba3a8d01d623a5efef48ab8e78752d58d4c90c3
Status affected
Version < 3b24c980dc07be4550a9d1450ed7057f882530e5
Version aba3a8d01d623a5efef48ab8e78752d58d4c90c3
Status affected
Version < ec357cd3e8af614855d286dd378725cdc7264df6
Version aba3a8d01d623a5efef48ab8e78752d58d4c90c3
Status affected
Version < 44e004f757a7ae13dfebaadbcfdb1a6f98c10377
Version aba3a8d01d623a5efef48ab8e78752d58d4c90c3
Status affected
Version < 5ec63fdbca604568890c577753c6f66c5b3ef0b5
Version aba3a8d01d623a5efef48ab8e78752d58d4c90c3
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.8
Status affected
Version < 5.8
Version 0
Status unaffected
Version <= 5.10.*
Version 5.10.171
Status unaffected
Version <= 5.15.*
Version 5.15.97
Status unaffected
Version <= 6.1.*
Version 6.1.15
Status unaffected
Version <= 6.2.*
Version 6.2.2
Status unaffected
Version <= *
Version 6.3
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.033
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String