{
  "cveId": "CVE-2023-53475",
  "url": "https://patchblox.com/security/cve/CVE-2023-53475",
  "summary": "CVE-2023-53475 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53475, released October 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: xhci: tegra: fix sleep in atomic call  When...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  usb: xhci: tegra: fix sleep in atomic call  When we set the dual-role port to Host mode, we observed the following splat: [  167.057718] BUG: sleeping function called from invalid context at include/linux/sched/mm.h:229 [  167.057872] Workqueue: events tegra_xusb_usb_phy_work [  167.057954] Call trace: [  167.057962]  dump_backtrace\u002B0x0/0x210 [  167.057996]  show_stack\u002B0x30/0x50 [  167.058020]  dump_stack_lvl\u002B0x64/0x84 [  167.058065]  dump_stack\u002B0x14/0x34 [  167.058100]  __might_resched\u002B0x144/0x180 [  167.058140]  __might_sleep\u002B0x64/0xd0 [  167.058171]  slab_pre_alloc_hook.constprop.0\u002B0xa8/0x110 [  167.058202]  __kmalloc_track_caller\u002B0x74/0x2b0 [  167.058233]  kvasprintf\u002B0xa4/0x190 [  167.058261]  kasprintf\u002B0x58/0x90 [  167.058285]  tegra_xusb_find_port_node.isra.0\u002B0x58/0xd0 [  167.058334]  tegra_xusb_find_port\u002B0x38/0xa0 [  167.058380]  tegra_xusb_padctl_get_usb3_companion\u002B0x38/0xd0 [  167.058430]  tegra_xhci_id_notify\u002B0x8c/0x1e0 [  167.058473]  notifier_call_chain\u002B0x88/0x100 [  167.058506]  atomic_notifier_call_chain\u002B0x44/0x70 [  167.058537]  tegra_xusb_usb_phy_work\u002B0x60/0xd0 [  167.058581]  process_one_work\u002B0x1dc/0x4c0 [  167.058618]  worker_thread\u002B0x54/0x410 [  167.058650]  kthread\u002B0x188/0x1b0 [  167.058672]  ret_from_fork\u002B0x10/0x20  The function tegra_xusb_padctl_get_usb3_companion eventually calls tegra_xusb_find_port and this in turn calls kasprintf which might sleep and so cannot be called from an atomic context.  Fix this by moving the call to tegra_xusb_padctl_get_usb3_companion to the tegra_xhci_id_work function where it is really needed.",
  "published": "2025-10-01T12:15:49Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00159,
  "epssPercentile": 0.05079,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.25-1",
      "fix": "DEBIAN-CVE-2023-53475",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53475",
      "released": "2025-10-01T12:15:49Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.25-1",
      "fix": "DEBIAN-CVE-2023-53475",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53475",
      "released": "2025-10-01T12:15:49Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.25-1",
      "fix": "DEBIAN-CVE-2023-53475",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53475",
      "released": "2025-10-01T12:15:49Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}