Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-53356

usb: gadget: u_serial: Add null pointer check in gserial_suspend

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_suspend Consider a case where gserial_disconnect has already cleared gser->ioport. And if gserial_suspend gets called afterwards, it will lead to accessing of gser->ioport and thus causing null pointer dereference. Avoid this by adding a null pointer check. Added a static spinlock to prevent gser->ioport from becoming null after the newly added null pointer check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < 2788a3553f7497075653210b42e2aeb6ba95e28eaffected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < a8ea7ed644cbf6314b5b0136b5398754b549fb8faffected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < e60a827ac074ce6bd58305fe5a86afab5fce6a04affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < 374447e3367767156405bedd230c5d391f4b7962affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < 2f6ecb89fe8feb2b60a53325b0eeb9866d88909aaffected

Linux Linux

Default version status: affected

  • 5.8affected
  • 0 to < 5.8unaffected
  • 5.10.188 to ≤ 5.10.*unaffected
  • 5.15.121 to ≤ 5.15.*unaffected
  • 6.1.39 to ≤ 6.1.*unaffected
  • 6.4.4 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References