CVE-2023-53510
BaseFortify
Publication date: 2025-10-01
Last updated on: 2026-04-06
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 3.12 (inc) to 6.3.13 (exc) |
| linux | linux_kernel | From 6.4 (inc) to 6.4.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-415 | The product calls free() twice on the same memory address. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the Linux kernel's handling of SCSI commands in the UFS (Universal Flash Storage) driver. Specifically, the function ufshcd_queuecommand() may be called twice consecutively for the same SCSI command before it is completed, which can cause improper handling of the command state (lrbp->cmd). The fix involves changing how the command state is checked and cleared to prevent errors and warnings related to command timeouts.
How can this vulnerability impact me? :
If unpatched, this vulnerability could lead to warnings and potential instability in the Linux kernel's UFS driver when SCSI commands time out or are mishandled. This could affect system reliability and performance, especially in systems relying on UFS storage devices.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring the system logs for specific warning messages related to the ufshcd_queuecommand function. Look for warnings such as: "WARNING: at drivers/ufs/core/ufshcd.c:2965 ufshcd_queuecommand+0x6f8/0x9a8" You can use commands like: - dmesg | grep ufshcd_queuecommand - journalctl -k | grep ufshcd_queuecommand to check for these warnings in the kernel logs, which indicate the issue occurring.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation involves updating the Linux kernel to a version where this vulnerability is fixed. The fix involves changes to the handling of lrbp->cmd in the ufshcd_queuecommand and ufshcd_release_scsi_cmd functions to prevent multiple calls for the same SCSI command before completion and avoid clearing lrbp->cmd improperly. Applying the patch or upgrading to the fixed kernel version will mitigate the issue.