CVE-2023-53866 — Missing Synchronization in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: soc-compress: Reposition and add pcm_mutex
If panic_on_warn is set and compress stream(DPCM) is started,
then kernel panic occurred because card->pcm_mutex isn't held appropriately.
In the following functions, warning were issued at this line
"snd_soc_dpcm_mutex_assert_held".
static int dpcm_be_connect(struct snd_soc_pcm_runtime *fe,
struct snd_soc_pcm_runtime *be, int stream)
{
...
snd_soc_dpcm_mutex_assert_held(fe);
.…
Affected Packages4 packages
▶CVEListV5linux/linuxb7898396f4bbe160f546d0c5e9fa17cca9a7d153 — 9a9942cbdb7c3f41452f7bc4a9ff9f0b45eb3651+3
🔴Vulnerability Details
3OSV▶
CVE-2023-53866: In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: Reposition and add pcm_mutex If panic_on_warn is set and compr↗2025-12-09
GHSA▶
GHSA-2r2h-c3j9-j3mg: In the Linux kernel, the following vulnerability has been resolved:
ASoC: soc-compress: Reposition and add pcm_mutex
If panic_on_warn is set and com↗2025-12-09