{"api_version":"1","generated_at":"2026-07-23T12:20:16+00:00","cve":"CVE-2023-53519","urls":{"html":"https://cve.report/CVE-2023-53519","api":"https://cve.report/api/cve/CVE-2023-53519.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-53519","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-53519"},"summary":{"title":"media: v4l2-mem2mem: add lock to protect parameter num_rdy","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-mem2mem: add lock to protect parameter num_rdy\n\nGetting below error when using KCSAN to check the driver. Adding lock to\nprotect parameter num_rdy when getting the value with function:\nv4l2_m2m_num_src_bufs_ready/v4l2_m2m_num_dst_bufs_ready.\n\nkworker/u16:3: [name:report&]BUG: KCSAN: data-race in v4l2_m2m_buf_queue\nkworker/u16:3: [name:report&]\n\nkworker/u16:3: [name:report&]read-write to 0xffffff8105f35b94 of 1 bytes by task 20865 on cpu 7:\nkworker/u16:3:  v4l2_m2m_buf_queue+0xd8/0x10c","state":"PUBLISHED","assigner":"Linux","published_at":"2025-10-01 12:15:56","updated_at":"2026-04-06 13:04:59"},"problem_types":["CWE-667"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"5.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}}],"references":[{"url":"https://git.kernel.org/stable/c/690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2","name":"https://git.kernel.org/stable/c/690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/e52de26cb37459b16213438a2c82feb155dd3bbd","name":"https://git.kernel.org/stable/c/e52de26cb37459b16213438a2c82feb155dd3bbd","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/7fc7f87725805197388ba749a1801df33000fa50","name":"https://git.kernel.org/stable/c/7fc7f87725805197388ba749a1801df33000fa50","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/56b5c3e67b0f9af3f45cf393be048ee8d8a92694","name":"https://git.kernel.org/stable/c/56b5c3e67b0f9af3f45cf393be048ee8d8a92694","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/1676748aa29099fc0abd71e0fb092e76e835f25c","name":"https://git.kernel.org/stable/c/1676748aa29099fc0abd71e0fb092e76e835f25c","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/e01ea1c4191ee08440b5f86db98dff695e9cedf9","name":"https://git.kernel.org/stable/c/e01ea1c4191ee08440b5f86db98dff695e9cedf9","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/c71aa5f1cf961264690f2560503ea396b6e3c680","name":"https://git.kernel.org/stable/c/c71aa5f1cf961264690f2560503ea396b6e3c680","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/ef009fe2010ea2a3a7045ecb72729cf366e0967b","name":"https://git.kernel.org/stable/c/ef009fe2010ea2a3a7045ecb72729cf366e0967b","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":["Patch"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53519","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53519","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 7fc7f87725805197388ba749a1801df33000fa50 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 ef009fe2010ea2a3a7045ecb72729cf366e0967b git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 e52de26cb37459b16213438a2c82feb155dd3bbd git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 1676748aa29099fc0abd71e0fb092e76e835f25c git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 c71aa5f1cf961264690f2560503ea396b6e3c680 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 e01ea1c4191ee08440b5f86db98dff695e9cedf9 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 908a0d7c588ef87e5cf0a26805e6002a78ac9d13 56b5c3e67b0f9af3f45cf393be048ee8d8a92694 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 2.6.39","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 2.6.39 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 4.14.324 4.14.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 4.19.293 4.19.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.4.255 5.4.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.10.192 5.10.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.15.128 5.15.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.1.47 6.1.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.4.12 6.4.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.5 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"53519","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"linux","cpe5":"linux_kernel","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/media/v4l2-mem2mem.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2","status":"affected","version":"908a0d7c588ef87e5cf0a26805e6002a78ac9d13","versionType":"git"},{"lessThan":"7fc7f87725805197388ba749a1801df33000fa50","status":"affected","version":"908a0d7c588ef87e5cf0a26805e6002a78ac9d13","versionType":"git"},{"lessThan":"ef009fe2010ea2a3a7045ecb72729cf366e0967b","status":"affected","version":"908a0d7c588ef87e5cf0a26805e6002a78ac9d13","versionType":"git"},{"lessThan":"e52de26cb37459b16213438a2c82feb155dd3bbd","status":"affected","version":"908a0d7c588ef87e5cf0a26805e6002a78ac9d13","versionType":"git"},{"lessThan":"1676748aa29099fc0abd71e0fb092e76e835f25c","status":"affected","version":"908a0d7c588ef87e5cf0a26805e6002a78ac9d13","versionType":"git"},{"lessThan":"c71aa5f1cf961264690f2560503ea396b6e3c680","status":"affected","version":"908a0d7c588ef87e5cf0a26805e6002a78ac9d13","versionType":"git"},{"lessThan":"e01ea1c4191ee08440b5f86db98dff695e9cedf9","status":"affected","version":"908a0d7c588ef87e5cf0a26805e6002a78ac9d13","versionType":"git"},{"lessThan":"56b5c3e67b0f9af3f45cf393be048ee8d8a92694","status":"affected","version":"908a0d7c588ef87e5cf0a26805e6002a78ac9d13","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["include/media/v4l2-mem2mem.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.39"},{"lessThan":"2.6.39","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.14.*","status":"unaffected","version":"4.14.324","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.293","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.255","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.192","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.128","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.47","versionType":"semver"},{"lessThanOrEqual":"6.4.*","status":"unaffected","version":"6.4.12","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.5","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.14.324","versionStartIncluding":"2.6.39","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.19.293","versionStartIncluding":"2.6.39","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.4.255","versionStartIncluding":"2.6.39","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.192","versionStartIncluding":"2.6.39","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.128","versionStartIncluding":"2.6.39","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.47","versionStartIncluding":"2.6.39","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.4.12","versionStartIncluding":"2.6.39","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.5","versionStartIncluding":"2.6.39","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-mem2mem: add lock to protect parameter num_rdy\n\nGetting below error when using KCSAN to check the driver. Adding lock to\nprotect parameter num_rdy when getting the value with function:\nv4l2_m2m_num_src_bufs_ready/v4l2_m2m_num_dst_bufs_ready.\n\nkworker/u16:3: [name:report&]BUG: KCSAN: data-race in v4l2_m2m_buf_queue\nkworker/u16:3: [name:report&]\n\nkworker/u16:3: [name:report&]read-write to 0xffffff8105f35b94 of 1 bytes by task 20865 on cpu 7:\nkworker/u16:3:  v4l2_m2m_buf_queue+0xd8/0x10c"}],"providerMetadata":{"dateUpdated":"2026-01-05T10:21:06.210Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/690dd4780b3f4d755e4e7883e8c3d1b5052f6bf2"},{"url":"https://git.kernel.org/stable/c/7fc7f87725805197388ba749a1801df33000fa50"},{"url":"https://git.kernel.org/stable/c/ef009fe2010ea2a3a7045ecb72729cf366e0967b"},{"url":"https://git.kernel.org/stable/c/e52de26cb37459b16213438a2c82feb155dd3bbd"},{"url":"https://git.kernel.org/stable/c/1676748aa29099fc0abd71e0fb092e76e835f25c"},{"url":"https://git.kernel.org/stable/c/c71aa5f1cf961264690f2560503ea396b6e3c680"},{"url":"https://git.kernel.org/stable/c/e01ea1c4191ee08440b5f86db98dff695e9cedf9"},{"url":"https://git.kernel.org/stable/c/56b5c3e67b0f9af3f45cf393be048ee8d8a92694"}],"title":"media: v4l2-mem2mem: add lock to protect parameter num_rdy","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2023-53519","datePublished":"2025-10-01T11:46:06.419Z","dateReserved":"2025-10-01T11:39:39.407Z","dateUpdated":"2026-01-05T10:21:06.210Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-10-01 12:15:56","lastModifiedDate":"2026-04-06 13:04:59","problem_types":["CWE-667"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":3.6}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.39","versionEndExcluding":"4.14.324","matchCriteriaId":"2D1848FB-1473-45A5-A154-8CA96F49B896"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.15","versionEndExcluding":"4.19.293","matchCriteriaId":"39603052-E341-4096-8535-38D44A60E845"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.20","versionEndExcluding":"5.4.255","matchCriteriaId":"1379E40A-2AC3-484E-929A-7F46B6C3B521"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"5.10.192","matchCriteriaId":"9396FFDC-6A0D-44B7-9368-21B456F6D4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.11","versionEndExcluding":"5.15.128","matchCriteriaId":"1415629F-F97B-4880-BA1E-AF3DBB8EF305"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.16","versionEndExcluding":"6.1.47","matchCriteriaId":"2EEA01B0-0151-4E0F-B140-1A441EEDD717"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.2","versionEndExcluding":"6.4.12","matchCriteriaId":"CF8ECF64-40AE-49AB-8315-4D83F9F56ECF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2023","CveId":"53519","Ordinal":"1","Title":"media: v4l2-mem2mem: add lock to protect parameter num_rdy","CVE":"CVE-2023-53519","Year":"2023"},"notes":[{"CveYear":"2023","CveId":"53519","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-mem2mem: add lock to protect parameter num_rdy\n\nGetting below error when using KCSAN to check the driver. Adding lock to\nprotect parameter num_rdy when getting the value with function:\nv4l2_m2m_num_src_bufs_ready/v4l2_m2m_num_dst_bufs_ready.\n\nkworker/u16:3: [name:report&]BUG: KCSAN: data-race in v4l2_m2m_buf_queue\nkworker/u16:3: [name:report&]\n\nkworker/u16:3: [name:report&]read-write to 0xffffff8105f35b94 of 1 bytes by task 20865 on cpu 7:\nkworker/u16:3:  v4l2_m2m_buf_queue+0xd8/0x10c","Type":"Description","Title":"media: v4l2-mem2mem: add lock to protect parameter num_rdy"}]}}}