CVE-2023-53519

media: v4l2-mem2mem: add lock to protect parameter num_rdy

State: Published
Severity: Not scored
Published: Oct 1, 2025
Updated: May 11, 2026
Reserved: Oct 1, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

media: v4l2-mem2mem: add lock to protect parameter num_rdy

Getting below error when using KCSAN to check the driver. Adding lock to protect parameter num_rdy when getting the value with function: v4l2_m2m_num_src_bufs_ready/v4l2_m2m_num_dst_bufs_ready.

kworker/u16:3: [name:report&]BUG: KCSAN: data-race in v4l2_m2m_buf_queue kworker/u16:3: [name:report&]

kworker/u16:3: [name:report&]read-write to 0xffffff8105f35b94 of 1 bytes by task 20865 on cpu 7: kworker/u16:3: v4l2_m2m_buf_queue+0xd8/0x10c

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before 690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2Affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before 7fc7f87725805197388ba749a1801df33000fa50Affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before ef009fe2010ea2a3a7045ecb72729cf366e0967bAffected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before e52de26cb37459b16213438a2c82feb155dd3bbdAffected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before 1676748aa29099fc0abd71e0fb092e76e835f25cAffected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before c71aa5f1cf961264690f2560503ea396b6e3c680Affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before e01ea1c4191ee08440b5f86db98dff695e9cedf9Affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before 56b5c3e67b0f9af3f45cf393be048ee8d8a92694Affected
LinuxLinux	2.6.39Affected before 2.6.39Not affected 4.14.324 through 4.14.Not affected 4.19.293 through 4.19.Not affected 5.4.255 through 5.4.Not affected 5.10.192 through 5.10.Not affected 5.15.128 through 5.15.Not affected 6.1.47 through 6.1.Not affected 6.4.12 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before 690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2Affected
908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before 7fc7f87725805197388ba749a1801df33000fa50Affected
908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before ef009fe2010ea2a3a7045ecb72729cf366e0967bAffected
908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before e52de26cb37459b16213438a2c82feb155dd3bbdAffected
908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before 1676748aa29099fc0abd71e0fb092e76e835f25cAffected
908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before c71aa5f1cf961264690f2560503ea396b6e3c680Affected
908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before e01ea1c4191ee08440b5f86db98dff695e9cedf9Affected
908a0d7c588ef87e5cf0a26805e6002a78ac9d13 to before 56b5c3e67b0f9af3f45cf393be048ee8d8a92694Affected

LinuxLinux

2.6.39Affected
before 2.6.39Not affected
4.14.324 through 4.14.*Not affected
4.19.293 through 4.19.*Not affected
5.4.255 through 5.4.*Not affected
5.10.192 through 5.10.*Not affected
5.15.128 through 5.15.*Not affected
6.1.47 through 6.1.*Not affected
6.4.12 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.