NetSight
IP …
medium5.5

CVE-2023-52853

In the Linux kernel, the following vulnerability has been resolved: hid: cp2112: Fix duplicate workqueue initialization Previously the cp2112 driver called INI…

Impact

In the Linux kernel, the following vulnerability has been resolved: hid: cp2112: Fix duplicate workqueue initialization Previously the cp2112 driver called INIT_DELAYED_WORK within cp2112_gpio_irq_startup, resulting in duplicate initilizations of the workqueue on subsequent IRQ startups following an initial request. This resulted in a warning in set_work_data in workqueue.c, as well as a rare NULL dereference within process_one_work in workqueue.c. Initialize the workqueue within _probe instead.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.10 before 4.19.299
from 4.20 before 5.4.261
from 5.5 before 5.10.201
from 5.11 before 5.15.139
from 5.16 before 6.1.63
from 6.2 before 6.5.12

Weakness classification

CWE-476

References