{
  "cveId": "CVE-2023-53098",
  "url": "https://patchblox.com/security/cve/CVE-2023-53098",
  "summary": "CVE-2023-53098 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53098, released May 2, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  media: rc: gpio-ir-recv: add remove function  In...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  media: rc: gpio-ir-recv: add remove function  In case runtime PM is enabled, do runtime PM clean up to remove cpu latency qos request, otherwise driver removal may have below kernel dump:  [   19.463299] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000048 [   19.472161] Mem abort info: [   19.474985]   ESR = 0x0000000096000004 [   19.478754]   EC = 0x25: DABT (current EL), IL = 32 bits [   19.484081]   SET = 0, FnV = 0 [   19.487149]   EA = 0, S1PTW = 0 [   19.490361]   FSC = 0x04: level 0 translation fault [   19.495256] Data abort info: [   19.498149]   ISV = 0, ISS = 0x00000004 [   19.501997]   CM = 0, WnR = 0 [   19.504977] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000049f81000 [   19.511432] [0000000000000048] pgd=0000000000000000, p4d=0000000000000000 [   19.518245] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [   19.524520] Modules linked in: gpio_ir_recv(\u002B) rc_core [last unloaded: rc_core] [   19.531845] CPU: 0 PID: 445 Comm: insmod Not tainted 6.2.0-rc1-00028-g2c397a46d47c #72 [   19.531854] Hardware name: FSL i.MX8MM EVK board (DT) [   19.531859] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [   19.551777] pc : cpu_latency_qos_remove_request\u002B0x20/0x110 [   19.557277] lr : gpio_ir_recv_runtime_suspend\u002B0x18/0x30 [gpio_ir_recv] [   19.557294] sp : ffff800008ce3740 [   19.557297] x29: ffff800008ce3740 x28: 0000000000000000 x27: ffff800008ce3d50 [   19.574270] x26: ffffc7e3e9cea100 x25: 00000000000f4240 x24: ffffc7e3f9ef0e30 [   19.574284] x23: 0000000000000000 x22: ffff0061803820f4 x21: 0000000000000008 [   19.574296] x20: ffffc7e3fa75df30 x19: 0000000000000020 x18: ffffffffffffffff [   19.588570] x17: 0000000000000000 x16: ffffc7e3f9efab70 x15: ffffffffffffffff [   19.595712] x14: ffff800008ce37b8 x13: ffff800008ce37aa x12: 0000000000000001 [   19.602853] x11: 0000000000000001 x10: ffffcbe3ec0dff87 x9 : 0000000000000008 [   19.609991] x8 : 0101010101010101 x7 : 0000000000000000 x6 : 000000000f0bfe9f [   19.624261] x5 : 00ffffffffffffff x4 : 0025ab8e00000000 x3 : ffff006180382010 [   19.631405] x2 : ffffc7e3e9ce8030 x1 : ffffc7e3fc3eb810 x0 : 0000000000000020 [   19.638548] Call trace: [   19.640995]  cpu_latency_qos_remove_request\u002B0x20/0x110 [   19.646142]  gpio_ir_recv_runtime_suspend\u002B0x18/0x30 [gpio_ir_recv] [   19.652339]  pm_generic_runtime_suspend\u002B0x2c/0x44 [   19.657055]  __rpm_callback\u002B0x48/0x1dc [   19.660807]  rpm_callback\u002B0x6c/0x80 [   19.664301]  rpm_suspend\u002B0x10c/0x640 [   19.667880]  rpm_idle\u002B0x250/0x2d0 [   19.671198]  update_autosuspend\u002B0x38/0xe0 [   19.675213]  pm_runtime_set_autosuspend_delay\u002B0x40/0x60 [   19.680442]  gpio_ir_recv_probe\u002B0x1b4/0x21c [gpio_ir_recv] [   19.685941]  platform_probe\u002B0x68/0xc0 [   19.689610]  really_probe\u002B0xc0/0x3dc [   19.693189]  __driver_probe_device\u002B0x7c/0x190 [   19.697550]  driver_probe_device\u002B0x3c/0x110 [   19.701739]  __driver_attach\u002B0xf4/0x200 [   19.705578]  bus_for_each_dev\u002B0x70/0xd0 [   19.709417]  driver_attach\u002B0x24/0x30 [   19.712998]  bus_add_driver\u002B0x17c/0x240 [   19.716834]  driver_register\u002B0x78/0x130 [   19.720676]  __platform_driver_register\u002B0x28/0x34 [   19.725386]  gpio_ir_recv_driver_init\u002B0x20/0x1000 [gpio_ir_recv] [   19.731404]  do_one_initcall\u002B0x44/0x2ac [   19.735243]  do_init_module\u002B0x48/0x1d0 [   19.739003]  load_module\u002B0x19fc/0x2034 [   19.742759]  __do_sys_finit_module\u002B0xac/0x12c [   19.747124]  __arm64_sys_finit_module\u002B0x20/0x30 [   19.751664]  invoke_syscall\u002B0x48/0x114 [   19.755420]  el0_svc_common.constprop.0\u002B0xcc/0xec [   19.760132]  do_el0_svc\u002B0x38/0xb0 [   19.763456]  el0_svc\u002B0x2c/0x84 [   19.766516]  el0t_64_sync_handler\u002B0xf4/0x120 [   19.770789]  el0t_64_sync\u002B0x190/0x194 [   19.774460] Code: 910003fd a90153f3 aa0003f3 91204021 (f9401400) [   19.780556] ---[ end trace 0000000000000000 ]---",
  "published": "2025-05-02T16:15:28Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00202,
  "epssPercentile": 0.10242,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53098",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53098",
      "released": "2025-05-02T16:15:28Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53098",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53098",
      "released": "2025-05-02T16:15:28Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53098",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53098",
      "released": "2025-05-02T16:15:28Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}