BaseFortify

Publication date: 2025-10-04

Last updated on: 2026-03-23

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254, from drivers/hid/hid-hyperv.c:8: In function 'fortify_memcpy_chk', inlined from 'mousevsc_on_receive' at drivers/hid/hid-hyperv.c:272:3: include/linux/fortify-string.h:583:4: error: call to '__write_overflow_field' declared with attribute warning: detected write beyond size of field (1st parameter); maybe use struct_group()? [-Werror=attribute-warning] 583 | __write_overflow_field(p_size_field, size); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ My guess is that the WARN_ON() itself is what confuses gcc, so it no longer sees that there is a correct range check. Rework the code in a way that helps readability and avoids the warning.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-04

Last Modified

2026-03-23

Generated

2026-07-06

AI Q&A

2025-10-04

EPSS Evaluated

2026-07-05

NVD

CVE-2023-53553

EUVD

EUVD-2025-32307

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	6.5
linux	linux_kernel	From 6.2 (inc) to 6.4.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability relates to a warning in the Linux kernel's HID hyperv driver where a memcpy operation could potentially write beyond the size of a structure field, causing a compiler warning about a possible buffer overrun. The issue arises due to how the code is written, confusing the compiler's fortified memcpy checks, although a correct range check exists. The fix involved reworking the code to improve readability and avoid the warning.

Impact Analysis

The vulnerability involves a potential write beyond the size of a structure field in the Linux kernel's HID hyperv driver, which could lead to memory corruption or instability. However, the description suggests the issue is primarily a compiler warning rather than a confirmed exploitable flaw, and the code includes correct range checks. The impact would be related to system stability or security if the overrun were to occur.

Hi! I’m here to help you understand CVE-2023-53553. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70