cbcvebase.
CVE-2023-53519
published 2025-10-01

CVE-2023-53519: In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting below error when using…

PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.11%
1.3th percentile
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter num_rdy Getting below error when using KCSAN to check the driver. Adding lock to protect parameter num_rdy when getting the value with function: v4l2_m2m_num_src_bufs_ready/v4l2_m2m_num_dst_bufs_ready. kworker/u16:3: [name:report&]BUG: KCSAN: data-race in v4l2_m2m_buf_queue kworker/u16:3: [name:report&] kworker/u16:3: [name:report&]read-write to 0xffffff8105f35b94 of 1 bytes by task 20865 on cpu 7: kworker/u16:3: v4l2_m2m_buf_queue+0xd8/0x10c

Affected

21 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.52-1 (bookworm)linux 6.1.52-1 (bookworm)
linuxlinux
linuxlinux>= 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 < 690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2
linuxlinux>= 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 < 7fc7f87725805197388ba749a1801df33000fa507fc7f87725805197388ba749a1801df33000fa50
linuxlinux>= 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 < ef009fe2010ea2a3a7045ecb72729cf366e0967bef009fe2010ea2a3a7045ecb72729cf366e0967b
linuxlinux>= 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 < e52de26cb37459b16213438a2c82feb155dd3bbde52de26cb37459b16213438a2c82feb155dd3bbd
linuxlinux>= 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 < 1676748aa29099fc0abd71e0fb092e76e835f25c1676748aa29099fc0abd71e0fb092e76e835f25c
linuxlinux>= 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 < c71aa5f1cf961264690f2560503ea396b6e3c680c71aa5f1cf961264690f2560503ea396b6e3c680
linuxlinux>= 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 < e01ea1c4191ee08440b5f86db98dff695e9cedf9e01ea1c4191ee08440b5f86db98dff695e9cedf9
linuxlinux>= 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 < 56b5c3e67b0f9af3f45cf393be048ee8d8a9269456b5c3e67b0f9af3f45cf393be048ee8d8a92694
linuxlinux_kernel>= 0 < 5.10.197-15.10.197-1
linuxlinux_kernel>= 0 < 6.1.52-16.1.52-1
linuxlinux_kernel>= 0 < 6.4.13-16.4.13-1
linuxlinux_kernel>= 0 < 6.4.13-16.4.13-1
linuxlinux_kernel>= 2.6.39 < 4.14.3244.14.324
linuxlinux_kernel>= 4.15 < 4.19.2934.19.293
linuxlinux_kernel>= 4.20 < 5.4.2555.4.255
linuxlinux_kernel>= 5.11 < 5.15.1285.15.128
linuxlinux_kernel>= 5.16 < 6.1.476.1.47
linuxlinux_kernel>= 5.5 < 5.10.1925.10.192
linuxlinux_kernel>= 6.2 < 6.4.126.4.12

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.