null_blk: Always check queue mode setting from configfs

{
  "id": "015c3e37bc06565cbb3874301e00c5e2f873a8fd70eb851e6da3a550f6d09e05",
  "url": "https://osv.dev/vulnerability/CVE-2023-53576",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "null_blk: Always check queue mode setting from configfs",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: null_blk: Always check queue mode setting from configfs Make sure to check device queue mode in the null_validate_conf() and return error for NULL_Q_RQ as we don't allow legacy I/O path, without this patch we get OOPs when queue mode is set to 1 from configfs, following are repro steps :- modprobe null_blk nr_devices=0 mkdir config/nullb/nullb0 echo 1 > config/nullb/nullb0/memory_backed echo 4096 > config/nullb/nullb0/blocksize echo 20480 > config/nullb/nullb0/size echo 1 > config/nullb/nullb0/queue_mode echo 1 > config/nullb/nullb0/power Entering kdb (current=0xffff88810acdd080, pid 2372) on processor 42 Oops: (null) due to oops @ 0xffffffffc041c329 CPU: 42 PID: 2372 Comm: sh Tainted: G O N 6.3.0-rc5lblk+ #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:null_add_dev.part.0+0xd9/0x720 [null_blk] Code: 01 00 00 85 d2 0f 85 a1 03 00 00 48 83 bb 08 01 00 00 00 0f 85 f7 03 00 00 80 bb 62 01 00 00 00 48 8b 75 20 0f 85 6d 02 00 00 <48> 89 6e 60 48 8b 75 20 bf 06 00 00 00 e8 f5 37 2c c1 48 8b 75 20 RSP: 0018:ffffc900052cbde0 EFLAGS: 00010246 RAX: 0000000000000001 RBX: ffff88811084d800 RCX: 0000000000000001 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888100042e00 RBP: ffff8881053d8200 R08: ffffc900052cbd68 R09: ffff888105db2000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 R13: ffff888104765200 R14: ffff88810e",
    "evidence": "osv:CVE-2023-53576",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.10.181",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.113",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.30",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.3.4",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2023-53576",
      "aliases": [
        "CVE-2023-53576"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "e50b1e327aeb4b224364aa6f85c1713ff8b3654b"
                },
                {
                  "fixed": "e732a266b973cd4e115e2cc2ea5007119e8a7fbc"
                },
                {
                  "fixed": "35e304dbcefa95237a3d6f94c007bfb10f012b17"
                },
                {
                  "fixed": "fd35b7bb6d5a329c427924886949ab51f210200a"
                },
                {
                  "fixed": "651260e563d9f50827dac496dc8a0b9b23d5db1a"
                },
                {
                  "fixed": "63f8793ee60513a09f110ea460a6ff2c33811cdb"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53576.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "4.20.0"
                },
                {
                  "fixed": "5.10.181"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.113"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.30"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.3.4"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53576.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:46.851652991Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/35e304dbcefa95237a3d6f94c007bfb10f012b17",
        "https://git.kernel.org/stable/c/63f8793ee60513a09f110ea460a6ff2c33811cdb",
        "https://git.kernel.org/stable/c/651260e563d9f50827dac496dc8a0b9b23d5db1a",
        "https://git.kernel.org/stable/c/e732a266b973cd4e115e2cc2ea5007119e8a7fbc",
        "https://git.kernel.org/stable/c/fd35b7bb6d5a329c427924886949ab51f210200a",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53576.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53576",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53576.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2023-53576",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 514989,
  "published_at": "2025-10-04T15:17:15.931+00:00"
}