Riskcovery

CVE-2023-53551

usb: gadget: u_serial: Add null pointer check in gserial_resume

State
Published
Severity
Not scored
Published
Oct 4, 2025
Updated
May 11, 2026
Reserved
Oct 4, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: u_serial: Add null pointer check in gserial_resume

Consider a case where gserial_disconnect has already cleared gser->ioport. And if a wakeup interrupt triggers afterwards, gserial_resume gets called, which will lead to accessing of gser->ioport and thus causing null pointer dereference.Add a null pointer check to prevent this.

Added a static spinlock to prevent gser->ioport from becoming null after the newly added check.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to before c5360eec648bd506afa304ae4a71f82e13d41897Affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to before 3b24c980dc07be4550a9d1450ed7057f882530e5Affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to before ec357cd3e8af614855d286dd378725cdc7264df6Affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to before 44e004f757a7ae13dfebaadbcfdb1a6f98c10377Affected
  • aba3a8d01d623a5efef48ab8e78752d58d4c90c3 to before 5ec63fdbca604568890c577753c6f66c5b3ef0b5Affected
LinuxLinux
  • 5.8Affected
  • before 5.8Not affected
  • 5.10.171 through 5.10.*Not affected
  • 5.15.97 through 5.15.*Not affected
  • 6.1.15 through 6.1.*Not affected
  • 6.2.2 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.