GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-53176 (GCVE-0-2023-53176)

Vulnerability from cvelistv5 – Published: 2025-09-15 14:04 – Updated: 2026-08-05 09:12
VLAI
Title
serial: 8250: Reinit port->pm on port specific driver unbind
Summary
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port->pm on port specific driver unbind When we unbind a serial port hardware specific 8250 driver, the generic serial8250 driver takes over the port. After that we see an oops about 10 seconds later. This can produce the following at least on some TI SoCs: Unhandled fault: imprecise external abort (0x1406) Internal error: : 1406 [#1] SMP ARM Turns out that we may still have the serial port hardware specific driver port->pm in use, and serial8250_pm() tries to call it after the port specific driver is gone: serial8250_pm [8250_base] from uart_change_pm+0x54/0x8c [serial_base] uart_change_pm [serial_base] from uart_hangup+0x154/0x198 [serial_base] uart_hangup [serial_base] from __tty_hangup.part.0+0x328/0x37c __tty_hangup.part.0 from disassociate_ctty+0x154/0x20c disassociate_ctty from do_exit+0x744/0xaac do_exit from do_group_exit+0x40/0x8c do_group_exit from __wake_up_parent+0x0/0x1c Let's fix the issue by calling serial8250_set_defaults() in serial8250_unregister_port(). This will set the port back to using the serial8250 default functions, and sets the port->pm to point to serial8250_pm.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: c161afe9759ddcc174d08e7c4f683d08ac9ba86f , < 490bf37eaabb0a857ed1ae8e75d8854e41662f1c (git)
Affected: c161afe9759ddcc174d08e7c4f683d08ac9ba86f , < c9e080c3005fd183c56ff8f4d75edb5da0765d2c (git)
Affected: c161afe9759ddcc174d08e7c4f683d08ac9ba86f , < d5cd2928d31042a7c0a01464f9a8d95be736421d (git)
Affected: c161afe9759ddcc174d08e7c4f683d08ac9ba86f , < 2c86a1305c1406f45ea780d06953c484ea1d9e6e (git)
Affected: c161afe9759ddcc174d08e7c4f683d08ac9ba86f , < 1ba5594739d858e524ff0f398ee1ebfe0a8b9d41 (git)
Affected: c161afe9759ddcc174d08e7c4f683d08ac9ba86f , < af4d6dbb1a92ea424ad1ba1d0c88c7fa2345d872 (git)
Affected: c161afe9759ddcc174d08e7c4f683d08ac9ba86f , < 8e596aed5f2f98cf3e6e98d6fe1d689f4a319308 (git)
Affected: c161afe9759ddcc174d08e7c4f683d08ac9ba86f , < 04e82793f068d2f0ffe62fcea03d007a8cdc16a7 (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.37
Unaffected: 0 , < 2.6.37 (semver)
Unaffected: 4.14.316 , ≤ 4.14.* (semver)
Unaffected: 4.19.284 , ≤ 4.19.* (semver)
Unaffected: 5.4.244 , ≤ 5.4.* (semver)
Unaffected: 5.10.181 , ≤ 5.10.* (semver)
Unaffected: 5.15.113 , ≤ 5.15.* (semver)
Unaffected: 6.1.30 , ≤ 6.1.* (semver)
Unaffected: 6.3.4 , ≤ 6.3.* (semver)
Unaffected: 6.4 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/tty/serial/8250/8250_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "490bf37eaabb0a857ed1ae8e75d8854e41662f1c",
              "status": "affected",
              "version": "c161afe9759ddcc174d08e7c4f683d08ac9ba86f",
              "versionType": "git"
            },
            {
              "lessThan": "c9e080c3005fd183c56ff8f4d75edb5da0765d2c",
              "status": "affected",
              "version": "c161afe9759ddcc174d08e7c4f683d08ac9ba86f",
              "versionType": "git"
            },
            {
              "lessThan": "d5cd2928d31042a7c0a01464f9a8d95be736421d",
              "status": "affected",
              "version": "c161afe9759ddcc174d08e7c4f683d08ac9ba86f",
              "versionType": "git"
            },
            {
              "lessThan": "2c86a1305c1406f45ea780d06953c484ea1d9e6e",
              "status": "affected",
              "version": "c161afe9759ddcc174d08e7c4f683d08ac9ba86f",
              "versionType": "git"
            },
            {
              "lessThan": "1ba5594739d858e524ff0f398ee1ebfe0a8b9d41",
              "status": "affected",
              "version": "c161afe9759ddcc174d08e7c4f683d08ac9ba86f",
              "versionType": "git"
            },
            {
              "lessThan": "af4d6dbb1a92ea424ad1ba1d0c88c7fa2345d872",
              "status": "affected",
              "version": "c161afe9759ddcc174d08e7c4f683d08ac9ba86f",
              "versionType": "git"
            },
            {
              "lessThan": "8e596aed5f2f98cf3e6e98d6fe1d689f4a319308",
              "status": "affected",
              "version": "c161afe9759ddcc174d08e7c4f683d08ac9ba86f",
              "versionType": "git"
            },
            {
              "lessThan": "04e82793f068d2f0ffe62fcea03d007a8cdc16a7",
              "status": "affected",
              "version": "c161afe9759ddcc174d08e7c4f683d08ac9ba86f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/tty/serial/8250/8250_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.37"
            },
            {
              "lessThan": "2.6.37",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.316",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.284",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.244",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.181",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.316",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.284",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.244",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.181",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.113",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.30",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.4",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "2.6.37",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: 8250: Reinit port-\u003epm on port specific driver unbind\n\nWhen we unbind a serial port hardware specific 8250 driver, the generic\nserial8250 driver takes over the port. After that we see an oops about 10\nseconds later. This can produce the following at least on some TI SoCs:\n\nUnhandled fault: imprecise external abort (0x1406)\nInternal error: : 1406 [#1] SMP ARM\n\nTurns out that we may still have the serial port hardware specific driver\nport-\u003epm in use, and serial8250_pm() tries to call it after the port\nspecific driver is gone:\n\nserial8250_pm [8250_base] from uart_change_pm+0x54/0x8c [serial_base]\nuart_change_pm [serial_base] from uart_hangup+0x154/0x198 [serial_base]\nuart_hangup [serial_base] from __tty_hangup.part.0+0x328/0x37c\n__tty_hangup.part.0 from disassociate_ctty+0x154/0x20c\ndisassociate_ctty from do_exit+0x744/0xaac\ndo_exit from do_group_exit+0x40/0x8c\ndo_group_exit from __wake_up_parent+0x0/0x1c\n\nLet\u0027s fix the issue by calling serial8250_set_defaults() in\nserial8250_unregister_port(). This will set the port back to using\nthe serial8250 default functions, and sets the port-\u003epm to point to\nserial8250_pm."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached via local serial TTY hangup after a hardware-specific 8250 driver unbind/unregister hands the port back to generic serial8250; exploitation uses local device/sysfs/module operations, not network or adjacent-network access.\nAC:L - Once the port-specific driver is unbound, opening the re-registered TTY and triggering hangup (process exit/disassociate_ctty) reliably invokes the stale port-\u003epm callback with no race or uncontrolled environmental condition.\nPR:L - Triggering the stale callback only requires opening a serial TTY and causing hangup, which unprivileged users in typical dialout/serial groups can do; establishing unbind can also occur via hotplug paths without real root in the init namespace.\nUI:N - The attacker can perform the unbind (or rely on device removal) and then open/hang up the TTY themselves; no separate victim interaction is required.\nS:U - Impact remains within the kernel\u0027s authority on the local host; this is not a VM escape, IOMMU bypass, or other cross-boundary scope change.\nC:H - Calling a stale port-\u003epm into an unloaded driver is a function-pointer use-after-free that can be leveraged for arbitrary kernel memory disclosure under the higher-severity UAF guidance.\nI:H - The same stale callback UAF into freed module text can be abused for control-flow hijacking and arbitrary write/code execution primitives, not merely a clean crash.\nA:H - The demonstrated result is a kernel oops/abort (imprecise external abort / paging request) via uart_hangup \u2192 uart_change_pm \u2192 serial8250_pm, which is a full availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:12:55.297Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/490bf37eaabb0a857ed1ae8e75d8854e41662f1c"
        },
        {
          "url": "https://git.kernel.org/stable/c/c9e080c3005fd183c56ff8f4d75edb5da0765d2c"
        },
        {
          "url": "https://git.kernel.org/stable/c/d5cd2928d31042a7c0a01464f9a8d95be736421d"
        },
        {
          "url": "https://git.kernel.org/stable/c/2c86a1305c1406f45ea780d06953c484ea1d9e6e"
        },
        {
          "url": "https://git.kernel.org/stable/c/1ba5594739d858e524ff0f398ee1ebfe0a8b9d41"
        },
        {
          "url": "https://git.kernel.org/stable/c/af4d6dbb1a92ea424ad1ba1d0c88c7fa2345d872"
        },
        {
          "url": "https://git.kernel.org/stable/c/8e596aed5f2f98cf3e6e98d6fe1d689f4a319308"
        },
        {
          "url": "https://git.kernel.org/stable/c/04e82793f068d2f0ffe62fcea03d007a8cdc16a7"
        }
      ],
      "title": "serial: 8250: Reinit port-\u003epm on port specific driver unbind",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53176",
    "datePublished": "2025-09-15T14:04:16.360Z",
    "dateReserved": "2025-09-15T13:59:19.064Z",
    "dateUpdated": "2026-08-05T09:12:55.297Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53176",
      "date": "2026-09-15",
      "epss": "0.00164",
      "percentile": "0.06003"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53176\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-15T14:15:39.527\",\"lastModified\":\"2026-08-04T10:18:56.320\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nserial: 8250: Reinit port-\u003epm on port specific driver unbind\\n\\nWhen we unbind a serial port hardware specific 8250 driver, the generic\\nserial8250 driver takes over the port. After that we see an oops about 10\\nseconds later. This can produce the following at least on some TI SoCs:\\n\\nUnhandled fault: imprecise external abort (0x1406)\\nInternal error: : 1406 [#1] SMP ARM\\n\\nTurns out that we may still have the serial port hardware specific driver\\nport-\u003epm in use, and serial8250_pm() tries to call it after the port\\nspecific driver is gone:\\n\\nserial8250_pm [8250_base] from uart_change_pm+0x54/0x8c [serial_base]\\nuart_change_pm [serial_base] from uart_hangup+0x154/0x198 [serial_base]\\nuart_hangup [serial_base] from __tty_hangup.part.0+0x328/0x37c\\n__tty_hangup.part.0 from disassociate_ctty+0x154/0x20c\\ndisassociate_ctty from do_exit+0x744/0xaac\\ndo_exit from do_group_exit+0x40/0x8c\\ndo_group_exit from __wake_up_parent+0x0/0x1c\\n\\nLet\u0027s fix the issue by calling serial8250_set_defaults() in\\nserial8250_unregister_port(). This will set the port back to using\\nthe serial8250 default functions, and sets the port-\u003epm to point to\\nserial8250_pm.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/tty/serial/8250/8250_core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"c161afe9759ddcc174d08e7c4f683d08ac9ba86f\",\"lessThan\":\"490bf37eaabb0a857ed1ae8e75d8854e41662f1c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c161afe9759ddcc174d08e7c4f683d08ac9ba86f\",\"lessThan\":\"c9e080c3005fd183c56ff8f4d75edb5da0765d2c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c161afe9759ddcc174d08e7c4f683d08ac9ba86f\",\"lessThan\":\"d5cd2928d31042a7c0a01464f9a8d95be736421d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c161afe9759ddcc174d08e7c4f683d08ac9ba86f\",\"lessThan\":\"2c86a1305c1406f45ea780d06953c484ea1d9e6e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c161afe9759ddcc174d08e7c4f683d08ac9ba86f\",\"lessThan\":\"1ba5594739d858e524ff0f398ee1ebfe0a8b9d41\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c161afe9759ddcc174d08e7c4f683d08ac9ba86f\",\"lessThan\":\"af4d6dbb1a92ea424ad1ba1d0c88c7fa2345d872\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c161afe9759ddcc174d08e7c4f683d08ac9ba86f\",\"lessThan\":\"8e596aed5f2f98cf3e6e98d6fe1d689f4a319308\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c161afe9759ddcc174d08e7c4f683d08ac9ba86f\",\"lessThan\":\"04e82793f068d2f0ffe62fcea03d007a8cdc16a7\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/tty/serial/8250/8250_core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.37\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.37\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.316\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.284\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.244\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.181\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.113\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.30\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.3.4\",\"lessThanOrEqual\":\"6.3.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.4\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.14.316\",\"matchCriteriaId\":\"A0661905-1FBF-4C8F-8C8F-9573FB6BF8B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.284\",\"matchCriteriaId\":\"9112EE64-11F4-46DB-A041-95118F20F81B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.244\",\"matchCriteriaId\":\"79F47095-8BA3-495A-AED3-2CCA5F2838E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.181\",\"matchCriteriaId\":\"F5B1726B-45AA-47F2-9261-6DC963E92248\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.113\",\"matchCriteriaId\":\"F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.30\",\"matchCriteriaId\":\"E9430E62-03EA-42E6-9E5E-BD1D5124D107\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.3.4\",\"matchCriteriaId\":\"26C54BF0-3EED-46D4-92A7-5F07F658B49B\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/04e82793f068d2f0ffe62fcea03d007a8cdc16a7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1ba5594739d858e524ff0f398ee1ebfe0a8b9d41\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2c86a1305c1406f45ea780d06953c484ea1d9e6e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/490bf37eaabb0a857ed1ae8e75d8854e41662f1c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8e596aed5f2f98cf3e6e98d6fe1d689f4a319308\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/af4d6dbb1a92ea424ad1ba1d0c88c7fa2345d872\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c9e080c3005fd183c56ff8f4d75edb5da0765d2c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d5cd2928d31042a7c0a01464f9a8d95be736421d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:20:31+00:00",
      "cve": "CVE-2023-53176",
      "id": "CVE-2023-53176",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "280",
      "product_status:known_affected": "98",
      "product_status:known_not_affected": "98",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: serial: 8250: Reinit port-\u003epm on port specific driver unbind",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53176.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-05T00:49:28Z",
      "cve": "CVE-2023-53176",
      "id": "CVE-2023-53176",
      "initial_release_date": "2025-09-18T23:40:25Z",
      "product_status:known_affected": "540",
      "product_status:known_not_affected": "178",
      "product_status:recommended": "243",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53176",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53176.json",
      "version": "34"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.