CVE-2023-53551: 
Linux Kernel vulnerability analysis and mitigation

A null pointer dereference vulnerability was discovered in the Linux kernel's USB gadget serial driver (CVE-2023-53551). The issue occurs when gserial_disconnect has cleared gser->ioport and a wakeup interrupt triggers afterwards, causing gserial_resume to access the null pointer (NVD, RedHat).

The vulnerability exists in the USB gadget serial driver's resume functionality. When gserial_disconnect clears the gser->ioport pointer and a subsequent wakeup interrupt triggers gserial_resume, it leads to a null pointer dereference. The issue has been assigned a CVSS v3.1 score of 4.7 with vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H (RedHat).

The vulnerability could lead to a system crash due to the null pointer dereference, potentially causing a denial of service condition in affected systems (RedHat).

The vulnerability requires local access and high complexity to exploit, with low privileges needed. No known exploits in the wild have been reported (RedHat).

The vulnerability has been fixed by adding a null pointer check in gserial_resume and implementing a static spinlock to prevent gser->ioport from becoming null after the check (NVD).