Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53207

ublk: fail to recover device if queue setup is interrupted

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ublk: fail to recover device if queue setup is interrupted In ublk_ctrl_end_recovery(), if wait_for_completion_interruptible() is interrupted by signal, queues aren't setup successfully yet, so we have to fail UBLK_CMD_END_USER_RECOVERY, otherwise kernel oops can be triggered.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c732a852b419fa057b53657e2daaf9433940391c to < 84415f934ad4e96f3507fd09b831953d60fb04ecaffected
  • c732a852b419fa057b53657e2daaf9433940391c to < b3a1e243a74632f88b22e713f1c7256754017d58affected
  • c732a852b419fa057b53657e2daaf9433940391c to < 0c0cbd4ebc375ceebc75c89df04b74f215fab23aaffected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.43 to ≤ 6.1.*unaffected
  • 6.4.8 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References