cbcvebase.
CVE-2023-53551
published 2025-10-04

CVE-2023-53551: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_resume Consider a case where…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
4.2th percentile
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_resume Consider a case where gserial_disconnect has already cleared gser->ioport. And if a wakeup interrupt triggers afterwards, gserial_resume gets called, which will lead to accessing of gser->ioport and thus causing null pointer dereference.Add a null pointer check to prevent this. Added a static spinlock to prevent gser->ioport from becoming null after the newly added check.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.15-1 (bookworm)linux 6.1.15-1 (bookworm)
linuxlinux——
linuxlinux>= aba3a8d01d623a5efef48ab8e78752d58d4c90c3 < c5360eec648bd506afa304ae4a71f82e13d41897c5360eec648bd506afa304ae4a71f82e13d41897
linuxlinux>= aba3a8d01d623a5efef48ab8e78752d58d4c90c3 < 3b24c980dc07be4550a9d1450ed7057f882530e53b24c980dc07be4550a9d1450ed7057f882530e5
linuxlinux>= aba3a8d01d623a5efef48ab8e78752d58d4c90c3 < ec357cd3e8af614855d286dd378725cdc7264df6ec357cd3e8af614855d286dd378725cdc7264df6
linuxlinux>= aba3a8d01d623a5efef48ab8e78752d58d4c90c3 < 44e004f757a7ae13dfebaadbcfdb1a6f98c1037744e004f757a7ae13dfebaadbcfdb1a6f98c10377
linuxlinux>= aba3a8d01d623a5efef48ab8e78752d58d4c90c3 < 5ec63fdbca604568890c577753c6f66c5b3ef0b55ec63fdbca604568890c577753c6f66c5b3ef0b5
linuxlinux_kernel>= 0 < 5.10.178-15.10.178-1
linuxlinux_kernel>= 0 < 6.1.15-16.1.15-1
linuxlinux_kernel>= 0 < 6.1.15-16.1.15-1
linuxlinux_kernel>= 0 < 6.1.15-16.1.15-1
linuxlinux_kernel>= 5.11 < 5.15.975.15.97
linuxlinux_kernel>= 5.16 < 6.1.156.1.15
linuxlinux_kernel>= 5.8 < 5.10.1715.10.171
linuxlinux_kernel>= 6.2 < 6.2.26.2.2

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.