CVE-2023-53292
MEDIUM 5.5 ALL-YEARSIn the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After grabbing q->sysfs_lock, q->elevator may become NULL because of elevator switch. Fix the NULL dereference on q->elevator by checking it with lock.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.1%chance of exploitation in 30 days · 4th percentile
Impact if exploited
5.5CVSS 3.1 · MEDIUM · ADP
- ConfidentialityNone
- IntegrityNone
- AvailabilityHigh
What an attacker needs
- ⚠Access: Requires local access to the host
- ⚠Privileges: Requires a low-privilege account
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Affected
Products Linux Simatic S7 1500 Cpu 1518 4 Pn/Dp Mfp Simatic S7 1500 Cpu 1518f 4 Pn/Dp Mfp Simatic S7 1500 Tm Mfp Gnu/Linux Subsystem Siplus S7 1500 Cpu 1518 4 Pn/Dp Mfp Linux Kernel
Weakness (CWE)
- CWE-476: NULL Pointer Dereference
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References and research data (JSON)
Vendor product assessments
Showing 32 of 274 vendor product statements; 242 omitted. Read the full vendor advisory.
bpftool as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/bpftool
- none available: Fix deferred
kernel-rt-debug as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug
- none available: Fix deferred
kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 7 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-tools-libs-devel
- none available: Fix deferred
kernel-debug-modules as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug-modules
- none available: Fix deferred
kernel-rt-debug as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug
- none available: Fix deferred
kernel-rt-selftests-internal as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-selftests-internal
- none available: Fix deferred
kernel.src as a component of Red Hat Enterprise Linux 8 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel?arch=src
- none available: Fix deferred
kernel-64k-debug-modules-core as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-64k-debug-modules-core
- none available: Fix deferred
kernel-cross-headers as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-cross-headers
- none available: Fix deferred
kernel-devel as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-devel
- none available: Fix deferred
kernel-rt-64k-core as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-64k-core
- none available: Fix deferred
kernel-rt-64k-devel-matched as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-64k-devel-matched
- none available: Fix deferred
kernel-rt-debug-kvm as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-kvm
- none available: Fix deferred
kernel-rt-modules-partner as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-modules-partner
- none available: Fix deferred
kernel-zfcpdump-devel-matched as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-zfcpdump-devel-matched
- none available: Fix deferred
rv as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/rv
- none available: Fix deferred
kernel as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-64k-debug-devel-matched as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-64k-debug-devel-matched
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-64k-modules as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-64k-modules
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-debug-core as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-core
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-debug-uki-virt as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-uki-virt
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-modules-extra as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-modules-extra
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-rt-64k-debug-core as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-debug-core
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-rt-64k-modules as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-64k-modules
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-rt-debug-core as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-debug-core
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-rt-devel as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-devel
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-tools-libs as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-tools-libs
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-zfcpdump-devel as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-zfcpdump-devel
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00libperf as a component of Red Hat Enterprise Linux 10 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/libperf
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-abi-whitelists as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-abi-whitelists
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00kernel-firmware as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-firmware
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00python-perf as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/python-perf
Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00
Known Affected Software Configurations
| Vendor | Product | Version range |
|---|---|---|
| Linux | Linux Kernel | < 6.4.7 |
All CVSS metrics
- MEDIUM 5.5 v3.1 · ADP Primary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - MEDIUM 5.5 v3.1 · NVD Primary
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Patches & mitigations
- https://git.kernel.org/stable/c/3e977386521b71471e66ec2ba82efdfcc456adf2 CVE record · Linux · Updated 2026-06-01T16:04:09.818Z
NVD · CVE-2023-53292 · Updated 2026-10-15T01:17:16.800 - https://git.kernel.org/stable/c/245165658e1c9f95c0fecfe02b9b1ebd30a1198a CVE record · Linux · Updated 2026-06-01T16:04:09.818Z
NVD · CVE-2023-53292 · Updated 2026-10-15T01:17:16.800
Advisories
- https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53292.json Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59897 EUVD · EUVD-2023-59897
Technical & other
- https://git.kernel.org/stable/c/988ddb77218d3975dd13dee7bb0e1fae098a9fdbCVE record · Linux · Updated 2026-06-01T16:04:09.818Z
NVD · CVE-2023-53292 · Updated 2026-10-15T01:17:16.800 - https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlCVE record · siemens-SADP · Updated 2026-10-15T00:17:12.684Z
NVD · CVE-2023-53292 · Updated 2026-10-15T01:17:16.800 - https://cert-portal.siemens.com/productcert/html/ssa-457936.htmlCVE record · siemens-SADP · Updated 2026-10-15T00:17:12.684Z
NVD · CVE-2023-53292 · Updated 2026-10-15T01:17:16.800 - https://cert-portal.siemens.com/productcert/html/ssa-784472.htmlCVE record · siemens-SADP · Updated 2026-10-15T00:17:12.684Z
NVD · CVE-2023-53292 · Updated 2026-10-15T01:17:16.800 - https://access.redhat.com/security/cve/CVE-2023-53292 Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2395679 Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00
- https://www.cve.org/CVERecord?id=CVE-2023-53292 Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2023-53292 Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00
- https://lore.kernel.org/linux-cve-announce/2025091626-CVE-2023-53292-24e9@gregkh/T Red Hat · CVE-2023-53292 · Updated 2026-07-21T18:52:28+00:00
Sources: NVD · CVE.org · All sources and attribution · EPSS