Upstream information

CVE-2023-53356 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: u_serial: Add null pointer check in gserial_suspend

Consider a case where gserial_disconnect has already cleared
gser->ioport. And if gserial_suspend gets called afterwards,
it will lead to accessing of gser->ioport and thus causing
null pointer dereference.

Avoid this by adding a null pointer check. Added a static
spinlock to prevent gser->ioport from becoming null after
the newly added null pointer check.

SUSE information

Overall state of this security issue: New

This issue is currently rated as having not set severity.

SUSE Bugzilla entry: 1249997 [NEW]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Wed Sep 17 18:05:03 2025
CVE page last modified: Thu Sep 18 12:15:35 2025