CVE-2023-53207

Published: Sep 15, 2025Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ublk: fail to recover device if queue setup is interrupted In ublk_ctrl_end_recovery(), if wait_for_completion_interruptible() is interrupted by signal, queues aren't setup successfully yet, so we have to fail UBLK_CMD_END_USER_RECOVERY, otherwise kernel oops can be triggered.

Affected (5)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 6.1 to 6.1.43
Linux Linux Kernel	From 6.2 to 6.4.8
Linux Linux Kernel	Version 6.5 rc1
Linux Linux Kernel	Version 6.5 rc2
Linux Linux Kernel	Version 6.5 rc3

References (3)

https://git.kernel.org/stable/c/0c0cbd4ebc375ceebc75c89df04b74f215fab23a

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/84415f934ad4e96f3507fd09b831953d60fb04ec

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/b3a1e243a74632f88b22e713f1c7256754017d58

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

Timeline

No history available yet.