CVE-2023-54159
In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: fix kernel panic at qmu transfer done irq handler When handle qmu transfer irq, it will unlock @mtu->lock before give back request, if another thread handle disconnect event at the same time, and try to disable ep, it may lock @mtu->lock and free qmu ring, then qmu irq hanlder may get a NULL gpd, avoid the KE by checking gpd's value before handling it. e.g. qmu done irq on cpu0 thread running on cpu1 qmu_done_tx() handle gpd [0] mtu3_requ_complete() mtu3_gadget_ep_disable() unlock @mtu->lock give back request lock @mtu->lock mtu3_ep_disable() mtu3_gpd_ring_free() unlock @mtu->lock lock @mtu->lock get next gpd [1] [1]: goto [0] to handle next gpd, and next gpd may be NULL.
Affected versions
Linux kernel versions
5.2
and later are affected. Fixed in
5.4.243,
5.10.180,
5.15.111,
6.1.28,
6.2.15,
6.3.2,
6.4
and their respective stable series.
References
The following references provide additional information about CVE-2023-54159 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/012936502a9cb7b0604e85bb961eb15e2bb40dd9
-
PatchKernel patch commithttps://git.kernel.org/stable/c/26ca30516b2c49dd04c134cbdf122311c538df98
-
PatchKernel patch commithttps://git.kernel.org/stable/c/3a7d4959560a2ee493ef222e3b63d359365f41ec
Frequently asked questions
-
What is CVE-2023-54159?
CVE-2023-54159 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.2 onward and has been patched in 5.4.243, 5.10.180, 5.15.111 and others. CVE-2023-54159 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2023-54159?
Yes — CVE-2023-54159 has been patched. Fixed versions include 5.4.243, 5.10.180, 5.15.111 and others. If you are running Linux kernel 5.2 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2023-54159 actively exploited?
No — CVE-2023-54159 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.