CVE-2023-53366: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53366 is a vulnerability discovered in the Linux kernel related to block device polling. The issue was identified when a crash occurred in an application using polled IO, where bio->bi_bdev could be NULL. This vulnerability was reported and resolved in September 2025 (NVD).

The vulnerability occurs when two tasks perform polled IO and share a poll queue. If task B completes IO from task A and puts the bio into the cache, it can reallocate that bio before task A finishes polling for it. The issue manifests as a NULL pointer dereference in the biopoll function when checking bio->bibdev. The vulnerability requires a preemption between the two tasks to occur (NVD).

When exploited, this vulnerability can lead to system crashes due to NULL pointer dereference, potentially affecting system stability and availability in environments where polled IO operations are being performed (NVD).

The fix involves implementing additional checks for NULL bio->bi_bdev in the polling code path. The solution has been incorporated into the Linux kernel to prevent the NULL pointer dereference scenario (NVD).