CVE-2023-53551: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Add null pointer check in gserial_resume Consider a case where gserial_disconnect has already cleared gser->ioport. And if a wakeup interrupt triggers afterwards, gserial_resume gets called, which will lead to accessing of gser->ioport and thus causing null pointer dereference.Add a null pointer check to prevent this. Added a static spinlock to prevent gser->ioport from becoming null after the newly added check.

Affected products

• Linux Linux Kernel: from 5.8, before 5.10.171 (fixed in 5.10.171); from 5.11, before 5.15.97 (fixed in 5.15.97); from 5.16, before 6.1.15 (fixed in 6.1.15); from 6.2, before 6.2.2 (fixed in 6.2.2)

Published 2025-10-04. Last modified 2026-06-17.