PT-2025-40226 · Linux+2 · Linux Kernel+2
Published
2023-04-17
·
Updated
2026-02-06
·
CVE-2023-53519
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel's v4l2-mem2mem subsystem related to insufficient locking protection of the
num rdy parameter. This can lead to data races when accessing this parameter within the v4l2 m2m num src bufs ready and v4l2 m2m num dst bufs ready functions, as identified by Kernel Concurrency Sanitizer (KCSAN) testing. The issue manifests as a data-race within the v4l2 m2m buf queue function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Locking
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Suse