CVE-2023-52493

bus: mhi: host: Drop chan lock before queuing buffers

State: Published
Severity: Not scored
Published: Feb 29, 2024
Updated: May 11, 2026
Reserved: Feb 20, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: host: Drop chan lock before queuing buffers

Ensure read and write locks for the channel are not taken in succession by dropping the read lock from parse_xfer_event() such that a callback given to client can potentially queue buffers and acquire the write lock in that process. Any queueing of buffers should be done without channel read lock acquired as it can result in multiple locks and a soft lockup.

[mani: added fixes tag and cc'ed stable]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 20a6dea2d1c68d4e03c6bb50bc12e72e226b5c0eAffected 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 6e4c84316e2b70709f0d00c33ba3358d9fc8eeceAffected 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 3c5ec66b4b3f6816f3a6161538672e389e537690Affected 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before eaefb9464031215d63c0a8a7e2bfaa00736aa17eAffected 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before b8eff20d87092e14cac976d057cb0aea2f1d0830Affected 1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 01bd694ac2f682fb8017e16148b928482bc8fa4bAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.76 through 6.1.Not affected 6.6.15 through 6.6.Not affected 6.7.3 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 20a6dea2d1c68d4e03c6bb50bc12e72e226b5c0eAffected
1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 6e4c84316e2b70709f0d00c33ba3358d9fc8eeceAffected
1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 3c5ec66b4b3f6816f3a6161538672e389e537690Affected
1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before eaefb9464031215d63c0a8a7e2bfaa00736aa17eAffected
1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before b8eff20d87092e14cac976d057cb0aea2f1d0830Affected
1d3173a3bae7039b765a0956e3e4bf846dbaacb8 to before 01bd694ac2f682fb8017e16148b928482bc8fa4bAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.76 through 6.1.*Not affected
6.6.15 through 6.6.*Not affected
6.7.3 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.