CVE-2023-52853

hid: cp2112: Fix duplicate workqueue initialization

State: Published
Severity: Not scored
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

hid: cp2112: Fix duplicate workqueue initialization

Previously the cp2112 driver called INIT_DELAYED_WORK within cp2112_gpio_irq_startup, resulting in duplicate initilizations of the workqueue on subsequent IRQ startups following an initial request. This resulted in a warning in set_work_data in workqueue.c, as well as a rare NULL dereference within process_one_work in workqueue.c.

Initialize the workqueue within _probe instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	13de9cca514ed63604263cad87ca8cb36e9b6489 to before df0daac2709473531d6a3472997cc65301ac06d6Affected 13de9cca514ed63604263cad87ca8cb36e9b6489 to before 727203e6e7e7020e1246fc1628cbdb8d90177819Affected 13de9cca514ed63604263cad87ca8cb36e9b6489 to before 3d959406c8fff2334d83d0c352d54fd6f5b2e7cdAffected 13de9cca514ed63604263cad87ca8cb36e9b6489 to before 012d0c66f9392a99232ac28217229f32dd3a70cfAffected 13de9cca514ed63604263cad87ca8cb36e9b6489 to before bafb12b629b7c3ad59812dd1ac1b0618062e0e38Affected 13de9cca514ed63604263cad87ca8cb36e9b6489 to before fb5718bc67337dde1528661f419ffcf275757592Affected 13de9cca514ed63604263cad87ca8cb36e9b6489 to before eb1121fac7986b30915ba20c5a04cc01fdcf160cAffected 13de9cca514ed63604263cad87ca8cb36e9b6489 to before e3c2d2d144c082dd71596953193adf9891491f42Affected
LinuxLinux	4.10Affected before 4.10Not affected 4.19.299 through 4.19.Not affected 5.4.261 through 5.4.Not affected 5.10.201 through 5.10.Not affected 5.15.139 through 5.15.Not affected 6.1.63 through 6.1.Not affected 6.5.12 through 6.5.Not affected 6.6.2 through 6.6.*Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

13de9cca514ed63604263cad87ca8cb36e9b6489 to before df0daac2709473531d6a3472997cc65301ac06d6Affected
13de9cca514ed63604263cad87ca8cb36e9b6489 to before 727203e6e7e7020e1246fc1628cbdb8d90177819Affected
13de9cca514ed63604263cad87ca8cb36e9b6489 to before 3d959406c8fff2334d83d0c352d54fd6f5b2e7cdAffected
13de9cca514ed63604263cad87ca8cb36e9b6489 to before 012d0c66f9392a99232ac28217229f32dd3a70cfAffected
13de9cca514ed63604263cad87ca8cb36e9b6489 to before bafb12b629b7c3ad59812dd1ac1b0618062e0e38Affected
13de9cca514ed63604263cad87ca8cb36e9b6489 to before fb5718bc67337dde1528661f419ffcf275757592Affected
13de9cca514ed63604263cad87ca8cb36e9b6489 to before eb1121fac7986b30915ba20c5a04cc01fdcf160cAffected
13de9cca514ed63604263cad87ca8cb36e9b6489 to before e3c2d2d144c082dd71596953193adf9891491f42Affected

LinuxLinux

4.10Affected
before 4.10Not affected
4.19.299 through 4.19.*Not affected
5.4.261 through 5.4.*Not affected
5.10.201 through 5.10.*Not affected
5.15.139 through 5.15.*Not affected
6.1.63 through 6.1.*Not affected
6.5.12 through 6.5.*Not affected
6.6.2 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.