CVE-2023-53530Use of a Non-reentrant Function in a Concurrent Context in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 96.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() The following call trace was observed: localhost kernel: nvme nvme0: NVME-FC{0}: controller connect complete localhost kernel: BUG: using smp_processor_id() in preemptible [00000000] code: kworker/u129:4/75092 localhost kernel: nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.1992-08.com.netapp:sn.b42d198afb4d11ecad6d00a098d6abfa:subsystem.PR_Channel2022_RH84_s

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel6.36.5.5+1
Debianlinux/linux_kernel< 6.5.6-1+1
CVEListV5linux/linux532a239605667320f4fd7473e416b718d0a2fbbb1a541999f31fcb10ea50eba2a563e6c451fd5c7d+4
debiandebian/linux< linux 6.5.6-1 (forky)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-5q6f-w2r4-gxrq: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() The foll2025-10-01
OSV
CVE-2023-53530: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() The follow2025-10-01

📋Vendor Advisories

2
Red Hat
kernel: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()2025-10-01
Debian
CVE-2023-53530: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...2023