CVE-2023-53357
BaseFortify
Publication date: 2025-09-17
Last updated on: 2025-12-11
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 2.6.36 (inc) to 4.19.291 (exc) |
| linux | linux_kernel | From 4.20 (inc) to 5.4.251 (exc) |
| linux | linux_kernel | From 5.5 (inc) to 5.10.188 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.121 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.39 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.3.13 (exc) |
| linux | linux_kernel | From 6.4 (inc) to 6.4.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel's md/raid10 subsystem involves a slab-out-of-bounds error caused by improper handling of a return value in the md_bitmap_get_counter() function. Specifically, when a large number is written to md/bitmap_set_bits, md_bitmap_checkpage() returns -EINVAL because the page index is greater than or equal to the number of bitmap pages. However, this error return was not immediately checked in md_bitmap_get_counter(), leading to an out-of-bounds memory access. The fix involved moving the check for 'page >= bitmap->pages' into md_bitmap_get_counter() and returning immediately if true to prevent the out-of-bounds access.
How can this vulnerability impact me? :
This vulnerability can lead to a slab-out-of-bounds memory access in the Linux kernel's RAID10 subsystem, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code or cause a denial of service. The exact impact depends on the context in which the vulnerable code is used and whether an attacker can trigger the condition by writing large numbers to the bitmap.