5.5

CVE-2023-53287: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2023-53287DEBIAN-CVE-2023-53287
Published 16-09-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2023-53287 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.15%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 13 · Related 12
RHSA-2025:6966SUSE-SU-2025:03600-1SUSE-SU-2025:03615-1SUSE-SU-2025:03634-1SUSE-SU-2025:20851-1SUSE-SU-2025:20861-1

Timeline

  1. 16-09-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Put the cdns set active part outside the spin lock The device may be scheduled during the resume process, so this cannot appear in atomic operations. Since pm_runtime_set_active will resume suppliers, put set active outside the spin lock, which is only used to protect the struct cdns data structure, otherwise the kernel will report the following warning: BUG: sleeping function called from invalid context at drivers/base/power/runtime.c:1163 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 651, name: sh preempt_count: 1, expected: 0 RCU nest depth: 0, expected: 0 CPU: 0 PID: 651 Comm: sh Tainted: G WC 6.1.20 #1 Hardware name: Freescale i.MX8QM MEK (DT) Call trace: dump_backtrace.part.0+0xe0/0xf0 show_stack+0x18/0x30 dump_stack_lvl+0x64/0x80 dump_stack+0x1c/0x38 __might_resched+0x1fc/0x240 __might_sleep+0x68/0xc0 __pm_runtime_resume+0x9c/0xe0 rpm_get_suppliers+0x68/0x1b0 __pm_runtime_set_status+0x298/0x560 cdns_resume+0xb0/0x1c0 cdns3_controller_resume.isra.0+0x1e0/0x250 cdns3_plat_resume+0x28/0x40

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

0.00 pp

From 0.14% on 22-09-2026

22-09-202622-10-2026
EPSS score
0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu124 products
  • linuxAll versions (No fix recorded) | < 5.15.0-94.104
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1053.58
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 7733f6c32e36ff9d7adadf40001039bf219b1cbe, < c861a61be6d30538ebcf7fcab1d43f244e298840 | ≥ 7733f6c32e36ff9d7adadf40001039bf219b1cbe, < bbc9c3652708108738009e096d608ece3cd9fa8a | ≥ 7733f6c32e36ff9d7adadf40001039bf219b1cbe, < d3f372ec95b89776f72d5c9a475424e27734c223 | ≥ 7733f6c32e36ff9d7adadf40001039bf219b1cbe, < 2319b9c87fe243327285f2fefd7374ffd75a65fc | 5.4
  • linux_kernel≥ 5.4, < 5.15.133 | ≥ 5.16, < 6.1.55 | ≥ 6.2, < 6.5.5
Debian1 product
  • linux< 6.1.55-1 | < 6.5.6-1

3 vendors · 127 products

References

8 links