CVE-2023-53510
scsi: ufs: core: Fix handling of lrbp->cmd
Reported by linux · Published October 1, 2025
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp->cmd ufshcd_queuecommand() may be called two times in a row for a SCSI command before it is completed. Hence make the following changes: - In the functions that submit a command, do not check the old value of lrbp->cmd nor clear lrbp->cmd in error paths. - In ufshcd_release_scsi_cmd(), do not clear lrbp->cmd. See also scsi_send_eh_cmnd(). This commit prevents that the following appears if a command times out: WARNING: at drivers/ufs/core/ufshcd.c:2965 ufshcd_queuecommand+0x6f8/0x9a8 Call trace: ufshcd_queuecommand+0x6f8/0x9a8 scsi_send_eh_cmnd+0x2c0/0x960 scsi_eh_test_devices+0x100/0x314 scsi_eh_ready_devs+0xd90/0x114c scsi_error_handler+0x2b4/0xb70 kthread+0x16c/0x1e0
EPSS 0.16% · 4.7th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | f3ee24af62681b942bbd799ac77b90a6d7e1fdb1, b6d76d63c6d21d5d26c301a46853a2aee72397d5, 549e91a9bbaa0ee480f59357868421a61d369770, 49234a401e161a2f2698f4612ab792c49b3cad1b |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 5a0b0cb9bee767ef10ff9ce2fb4141af06416288, 5a0b0cb9bee767ef10ff9ce2fb4141af06416288, 5a0b0cb9bee767ef10ff9ce2fb4141af06416288 |
| Linux | Linux | 3.12, 0, 6.1.167 |
| Linux | Linux | 6.3.13, 3.12, 0 |
| linux | linux_kernel | 3.12, 3.12, 3.12 |
Timeline
- Oct 1, 2025 CVE Published
- Oct 2, 2025 Coalition ESS Score (20 in total, the first dated here)
- Oct 8, 2025 EPSS Score (29 in total, the first dated here)
- Oct 12, 2025 PoC Published (6 in total, the first dated here)
- Jan 24, 2026 Security Advisory (43 in total, the first dated here)
- Oct 7, 2026 Distribution Patch (33 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2023-53510
vulnetix vdb fixes CVE-2023-53510Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-53510/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart