CVE-2023-53759 — Missing Synchronization in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 90.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 8
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: hidraw: fix data race on device refcount
The hidraw_open() function increments the hidraw device reference
counter. The counter has no dedicated synchronization mechanism,
resulting in a potential data race when concurrently opening a device.
The race is a regression introduced by commit 8590222e4b02 ("HID:
hidraw: Replace hidraw device table mutex with a rwsem"). While
minors_rwsem is intended to protect the hidraw_tabl…
Affected Packages4 packages
▶CVEListV5linux/linux8590222e4b021054a7167a4dd35b152a8ed7018e — 879e79c3aead41b8aa2e91164354b30bd1c4ef3b+4
🔴Vulnerability Details
3GHSA▶
GHSA-hgww-pjhr-mwxr: In the Linux kernel, the following vulnerability has been resolved:
HID: hidraw: fix data race on device refcount
The hidraw_open() function increme↗2025-12-08
OSV▶
CVE-2023-53759: In the Linux kernel, the following vulnerability has been resolved: HID: hidraw: fix data race on device refcount The hidraw_open() function increment↗2025-12-08