Riskcovery

CVE-2023-53207

ublk: fail to recover device if queue setup is interrupted

State
Published
Severity
5.5 Medium
Published
Sep 15, 2025
Updated
May 11, 2026
Reserved
Sep 15, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ublk: fail to recover device if queue setup is interrupted

In ublk_ctrl_end_recovery(), if wait_for_completion_interruptible() is interrupted by signal, queues aren't setup successfully yet, so we have to fail UBLK_CMD_END_USER_RECOVERY, otherwise kernel oops can be triggered.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c732a852b419fa057b53657e2daaf9433940391c to before 84415f934ad4e96f3507fd09b831953d60fb04ecAffected
  • c732a852b419fa057b53657e2daaf9433940391c to before b3a1e243a74632f88b22e713f1c7256754017d58Affected
  • c732a852b419fa057b53657e2daaf9433940391c to before 0c0cbd4ebc375ceebc75c89df04b74f215fab23aAffected
LinuxLinux
  • 6.1Affected
  • before 6.1Not affected
  • 6.1.43 through 6.1.*Not affected
  • 6.4.8 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.