CVE-2023-53254
BaseFortify
Publication date: 2025-09-15
Last updated on: 2025-12-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | to 6.1.18 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.2.5 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's cacheinfo component involves incorrect handling of the shared_cpu_map when CPUs have different cache hierarchies. The shared_cpu_map is supposed to represent which CPUs share caches at various levels, but the existing implementation assumes caches with the same index are shared, which is not always true. This can lead to slab-out-of-bounds memory access and mismatched shared_cpu_map data when CPUs have caches at different levels or with different indices. The fix involves checking that each cache is shared with all caches on other CPUs to prevent these issues.
How can this vulnerability impact me? :
This vulnerability can cause slab-out-of-bounds memory access in the Linux kernel, which may lead to system instability, crashes, or potential security risks such as memory corruption. Systems with CPUs that have different cache hierarchies could be affected, potentially impacting reliability and security of the system.