CVE-2023-53553
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-04

Last updated on: 2026-03-23

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: avoid struct memcpy overrun warning A previous patch addressed the fortified memcpy warning for most builds, but I still see this one with gcc-9: In file included from include/linux/string.h:254, from drivers/hid/hid-hyperv.c:8: In function 'fortify_memcpy_chk', inlined from 'mousevsc_on_receive' at drivers/hid/hid-hyperv.c:272:3: include/linux/fortify-string.h:583:4: error: call to '__write_overflow_field' declared with attribute warning: detected write beyond size of field (1st parameter); maybe use struct_group()? [-Werror=attribute-warning] 583 | __write_overflow_field(p_size_field, size); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ My guess is that the WARN_ON() itself is what confuses gcc, so it no longer sees that there is a correct range check. Rework the code in a way that helps readability and avoids the warning.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-04
Last Modified
2026-03-23
Generated
2026-06-16
AI Q&A
2025-10-04
EPSS Evaluated
2026-06-15
NVD
CVE-2023-53553
EUVD
EUVD-2025-32307
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel 6.5
linux linux_kernel From 6.2 (inc) to 6.4.5 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability relates to a warning in the Linux kernel's HID hyperv driver where a memcpy operation could potentially write beyond the size of a structure field, causing a compiler warning about a possible buffer overrun. The issue arises due to how the code is written, confusing the compiler's fortified memcpy checks, although a correct range check exists. The fix involved reworking the code to improve readability and avoid the warning.

Impact Analysis

The vulnerability involves a potential write beyond the size of a structure field in the Linux kernel's HID hyperv driver, which could lead to memory corruption or instability. However, the description suggests the issue is primarily a compiler warning rather than a confirmed exploitable flaw, and the code includes correct range checks. The impact would be related to system stability or security if the overrun were to occur.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-53553. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart