CVE-2023-53551

Source
https://cve.org/CVERecord?id=CVE-2023-53551
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53551.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53551
Downstream
Related
Published
2025-10-04T15:16:57.736Z
Modified
2026-07-15T01:49:08.044533449Z
Summary
usb: gadget: u_serial: Add null pointer check in gserial_resume
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: userial: Add null pointer check in gserialresume

Consider a case where gserialdisconnect has already cleared gser->ioport. And if a wakeup interrupt triggers afterwards, gserialresume gets called, which will lead to accessing of gser->ioport and thus causing null pointer dereference.Add a null pointer check to prevent this.

Added a static spinlock to prevent gser->ioport from becoming null after the newly added check.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53551.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
aba3a8d01d623a5efef48ab8e78752d58d4c90c3
Fixed
c5360eec648bd506afa304ae4a71f82e13d41897
Fixed
3b24c980dc07be4550a9d1450ed7057f882530e5
Fixed
ec357cd3e8af614855d286dd378725cdc7264df6
Fixed
44e004f757a7ae13dfebaadbcfdb1a6f98c10377
Fixed
5ec63fdbca604568890c577753c6f66c5b3ef0b5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53551.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.8.0
Fixed
5.10.171
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.97
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.15
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53551.json"