CVE-2023-53508: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ublk: fail to start device if queue setup is interrupted In ublk_ctrl_start_dev(), if wait_for_completion_interruptible() is interrupted by signal, queues aren't setup successfully yet, so we have to fail UBLK_CMD_START_DEV, otherwise kernel oops can be triggered. Reported by German when working on qemu-storage-deamon which requires single thread ublk daemon.

Affected products

• Linux Linux Kernel: from 6.0, before 6.1.43 (fixed in 6.1.43); from 6.2, before 6.4.8 (fixed in 6.4.8); version 6.5 only

Published 2025-10-01. Last modified 2026-06-17.