CVE-2023-53356

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue was identified in the gserial suspend function within the USB gadget subsystem. Specifically, if gserial disconnect clears gser->ioport and gserial suspend is subsequently called, it can lead to accessing a null pointer. A static spinlock was added to prevent gser->ioport from becoming null after the null pointer check.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.