Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-53551

usb: gadget: u_serial: Add null pointer check in gserial_resume

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_resume Consider a case where gserial_disconnect has already cleared gser->ioport. And if a wakeup interrupt triggers afterwards, gserial_resume gets called, which will lead to accessing of gser->ioport and thus causing null pointer dereference.Add a null pointer check to prevent this. Added a static spinlock to prevent gser->ioport from becoming null after the newly added check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < c5360eec648bd506afa304ae4a71f82e13d41897affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < 3b24c980dc07be4550a9d1450ed7057f882530e5affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < ec357cd3e8af614855d286dd378725cdc7264df6affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < 44e004f757a7ae13dfebaadbcfdb1a6f98c10377affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to < 5ec63fdbca604568890c577753c6f66c5b3ef0b5affected

Linux Linux

Default version status: affected

  • 5.8affected
  • 0 to < 5.8unaffected
  • 5.10.171 to ≤ 5.10.*unaffected
  • 5.15.97 to ≤ 5.15.*unaffected
  • 6.1.15 to ≤ 6.1.*unaffected
  • 6.2.2 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References