In the Linux kernel, the following vulnerability has been resolved:
hid: cp2112: Fix duplicate workqueue initialization
Previously the cp2112 driver called INITDELAYEDWORK within cp2112gpioirqstartup, resulting in duplicate initilizations of the workqueue on subsequent IRQ startups following an initial request. This resulted in a warning in setworkdata in workqueue.c, as well as a rare NULL dereference within processone_work in workqueue.c.
Initialize the workqueue within _probe instead.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52853.json"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52853.json"
[
{
"id": "CVE-2023-52853-0471859b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb5718bc67337dde1528661f419ffcf275757592",
"target": {
"file": "drivers/hid/hid-cp2112.c"
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"60769050679977198153373440900983679021",
"69247683092444376767848612262937703603",
"237484315775408673598647575867971743455",
"72202366019577676868637638625058701997",
"239384263363624020481128498188525865933",
"73786768289263828795372045244705425951",
"339279054949389280328565641846785912999"
],
"threshold": 0.9
}
},
{
"id": "CVE-2023-52853-0886b49f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df0daac2709473531d6a3472997cc65301ac06d6",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_gpio_irq_startup"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "309946435592849274629375541301751297104"
}
},
{
"id": "CVE-2023-52853-32e56e96",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@012d0c66f9392a99232ac28217229f32dd3a70cf",
"target": {
"file": "drivers/hid/hid-cp2112.c"
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"60769050679977198153373440900983679021",
"69247683092444376767848612262937703603",
"237484315775408673598647575867971743455",
"72202366019577676868637638625058701997",
"239384263363624020481128498188525865933",
"73786768289263828795372045244705425951",
"339279054949389280328565641846785912999"
],
"threshold": 0.9
}
},
{
"id": "CVE-2023-52853-34b9c516",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3c2d2d144c082dd71596953193adf9891491f42",
"target": {
"file": "drivers/hid/hid-cp2112.c"
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"60769050679977198153373440900983679021",
"69247683092444376767848612262937703603",
"237484315775408673598647575867971743455",
"72202366019577676868637638625058701997",
"239384263363624020481128498188525865933",
"73786768289263828795372045244705425951",
"339279054949389280328565641846785912999"
],
"threshold": 0.9
}
},
{
"id": "CVE-2023-52853-43938f9a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@727203e6e7e7020e1246fc1628cbdb8d90177819",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_gpio_irq_startup"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "309946435592849274629375541301751297104"
}
},
{
"id": "CVE-2023-52853-443bc75f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb1121fac7986b30915ba20c5a04cc01fdcf160c",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_probe"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 3609.0,
"function_hash": "50569610474788702416755257696148642791"
}
},
{
"id": "CVE-2023-52853-48f78390",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@012d0c66f9392a99232ac28217229f32dd3a70cf",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_gpio_irq_startup"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "309946435592849274629375541301751297104"
}
},
{
"id": "CVE-2023-52853-4bcb965e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df0daac2709473531d6a3472997cc65301ac06d6",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_probe"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 3560.0,
"function_hash": "24826129355984052670732253907933441544"
}
},
{
"id": "CVE-2023-52853-4c676880",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb1121fac7986b30915ba20c5a04cc01fdcf160c",
"target": {
"file": "drivers/hid/hid-cp2112.c"
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"60769050679977198153373440900983679021",
"69247683092444376767848612262937703603",
"237484315775408673598647575867971743455",
"72202366019577676868637638625058701997",
"239384263363624020481128498188525865933",
"73786768289263828795372045244705425951",
"339279054949389280328565641846785912999"
],
"threshold": 0.9
}
},
{
"id": "CVE-2023-52853-4cdd2348",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d959406c8fff2334d83d0c352d54fd6f5b2e7cd",
"target": {
"file": "drivers/hid/hid-cp2112.c"
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"60769050679977198153373440900983679021",
"69247683092444376767848612262937703603",
"237484315775408673598647575867971743455",
"72202366019577676868637638625058701997",
"239384263363624020481128498188525865933",
"73786768289263828795372045244705425951",
"339279054949389280328565641846785912999"
],
"threshold": 0.9
}
},
{
"id": "CVE-2023-52853-5caa96c0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@df0daac2709473531d6a3472997cc65301ac06d6",
"target": {
"file": "drivers/hid/hid-cp2112.c"
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"60769050679977198153373440900983679021",
"69247683092444376767848612262937703603",
"237484315775408673598647575867971743455",
"72202366019577676868637638625058701997",
"254265901818636154678048981177918425317",
"121233910989273021992250898967784906372",
"129949590418250194359809313383299626680"
],
"threshold": 0.9
}
},
{
"id": "CVE-2023-52853-7c8ad4ad",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3c2d2d144c082dd71596953193adf9891491f42",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_gpio_irq_startup"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "309946435592849274629375541301751297104"
}
},
{
"id": "CVE-2023-52853-7e3af4ef",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eb1121fac7986b30915ba20c5a04cc01fdcf160c",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_gpio_irq_startup"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "309946435592849274629375541301751297104"
}
},
{
"id": "CVE-2023-52853-83b2cde3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bafb12b629b7c3ad59812dd1ac1b0618062e0e38",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_gpio_irq_startup"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "309946435592849274629375541301751297104"
}
},
{
"id": "CVE-2023-52853-858f3539",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d959406c8fff2334d83d0c352d54fd6f5b2e7cd",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_gpio_irq_startup"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "309946435592849274629375541301751297104"
}
},
{
"id": "CVE-2023-52853-9c6c71f4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb5718bc67337dde1528661f419ffcf275757592",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_probe"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 3961.0,
"function_hash": "234948178787213861900264422697533881933"
}
},
{
"id": "CVE-2023-52853-a01c4525",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@727203e6e7e7020e1246fc1628cbdb8d90177819",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_probe"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 3560.0,
"function_hash": "24826129355984052670732253907933441544"
}
},
{
"id": "CVE-2023-52853-a9e51ba5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@727203e6e7e7020e1246fc1628cbdb8d90177819",
"target": {
"file": "drivers/hid/hid-cp2112.c"
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"60769050679977198153373440900983679021",
"69247683092444376767848612262937703603",
"237484315775408673598647575867971743455",
"72202366019577676868637638625058701997",
"254265901818636154678048981177918425317",
"121233910989273021992250898967784906372",
"129949590418250194359809313383299626680"
],
"threshold": 0.9
}
},
{
"id": "CVE-2023-52853-bcd46e51",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bafb12b629b7c3ad59812dd1ac1b0618062e0e38",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_probe"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 3961.0,
"function_hash": "234948178787213861900264422697533881933"
}
},
{
"id": "CVE-2023-52853-bfde8119",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@012d0c66f9392a99232ac28217229f32dd3a70cf",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_probe"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 3961.0,
"function_hash": "234948178787213861900264422697533881933"
}
},
{
"id": "CVE-2023-52853-c58435fa",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d959406c8fff2334d83d0c352d54fd6f5b2e7cd",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_probe"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 3961.0,
"function_hash": "234948178787213861900264422697533881933"
}
},
{
"id": "CVE-2023-52853-c65efec5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb5718bc67337dde1528661f419ffcf275757592",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_gpio_irq_startup"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 322.0,
"function_hash": "309946435592849274629375541301751297104"
}
},
{
"id": "CVE-2023-52853-cfcbe0f8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3c2d2d144c082dd71596953193adf9891491f42",
"target": {
"file": "drivers/hid/hid-cp2112.c",
"function": "cp2112_probe"
},
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 3609.0,
"function_hash": "50569610474788702416755257696148642791"
}
},
{
"id": "CVE-2023-52853-f95cfddb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bafb12b629b7c3ad59812dd1ac1b0618062e0e38",
"target": {
"file": "drivers/hid/hid-cp2112.c"
},
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"60769050679977198153373440900983679021",
"69247683092444376767848612262937703603",
"237484315775408673598647575867971743455",
"72202366019577676868637638625058701997",
"239384263363624020481128498188525865933",
"73786768289263828795372045244705425951",
"339279054949389280328565641846785912999"
],
"threshold": 0.9
}
}
]