Riskcovery

CVE-2023-52785

scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR

State
Published
Severity
Not scored
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR

If command timeout happens and cq complete IRQ is raised at the same time, ufshcd_mcq_abort clears lprb->cmd and a NULL pointer deref happens in the ISR. Error log:

ufshcd_abort: Device abort task at tag 18 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000108 pc : [0xffffffe27ef867ac] scsi_dma_unmap+0xc/0x44 lr : [0xffffffe27f1b898c] ufshcd_release_scsi_cmd+0x24/0x114

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f1304d4420777f82a1d844c606db3d9eca841765 to before 8f15a7e3c054d960bbd1521110700450bbf798a1Affected
  • f1304d4420777f82a1d844c606db3d9eca841765 to before f84d461f33a6b27304d468d9cfb56c0cefdb4ee7Affected
  • f1304d4420777f82a1d844c606db3d9eca841765 to before 27900d7119c464b43cd9eac69c85884d17bae240Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.