CVE-2023-53400
BaseFortify
Publication date: 2025-09-18
Last updated on: 2025-12-12
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | to 4.14.316 (exc) |
| linux | linux_kernel | From 4.15 (inc) to 4.19.284 (exc) |
| linux | linux_kernel | From 4.20 (inc) to 5.4.244 (exc) |
| linux | linux_kernel | From 5.5 (inc) to 5.10.181 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.113 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.30 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.3.4 (exc) |
| linux | linux_kernel | 6.4 |
| linux | linux_kernel | 6.4 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is in the Linux kernel's ALSA sound subsystem, specifically in the hda driver. The function get_line_out_pfx() can cause an Oops (a kernel crash) by overflowing a static array when handling more than 8 audio channels, such as in a 9.1 surround sound setup. This overflow can cause instability or crashes on affected systems like the MacBookPro 12,1 with Cirrus codec. The fix involves extending the array size and unifying code paths with proper size checks to prevent the overflow.
How can this vulnerability impact me? :
This vulnerability can cause the Linux kernel to crash (an Oops) when handling audio output with more than 8 channels, potentially leading to system instability or loss of audio functionality on affected hardware. It may disrupt normal system operation and require a reboot to recover.
What immediate steps should I take to mitigate this vulnerability?
Apply the Linux kernel update that includes the fix for the ALSA hda 9.1 surround channel names issue to prevent the Oops caused by overflowing the static array. As a workaround, ensure the system uses the patched code that extends support for 9.1 channels and includes proper size checks to avoid the overflow.