CVE-2023-53292CWE-476

CVE-2023-53292

Medium · published September 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none

After grabbing q->sysfs_lock, q->elevator may become NULL because of

elevator switch.

Fix the NULL dereference on q->elevator by checking it with lock.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.8th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-09-16T12:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.4.76.4.7
References (6)
https://git.kernel.org/stable/c/245165658e1c9f95c0fecfe02b9b1ebd30a1198a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3e977386521b71471e66ec2ba82efdfcc456adf2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/988ddb77218d3975dd13dee7bb0e1fae098a9fdb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://cert-portal.siemens.com/productcert/html/ssa-019113.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-457936.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-784472.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 16 SEP 08:11Z
    blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
    cvelistv5