CVE-2023-53207
BaseFortify
Publication date: 2025-09-15
Last updated on: 2025-12-04
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 6.1 (inc) to 6.1.43 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.4.8 (exc) |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's ublk subsystem. If the function ublk_ctrl_end_recovery() is interrupted by a signal during the wait_for_completion_interruptible() call, the device queues are not set up properly. If the recovery command UBLK_CMD_END_USER_RECOVERY is not failed in this case, it can lead to a kernel oops (crash). The fix ensures that the recovery command fails if the setup is interrupted, preventing the kernel crash.
How can this vulnerability impact me? :
If this vulnerability is triggered, it can cause the Linux kernel to crash (kernel oops), potentially leading to system instability or downtime. This could affect the availability and reliability of systems running the affected kernel version.