CVE-2023-53598
BaseFortify
Publication date: 2025-10-04
Last updated on: 2026-03-21
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 6.3 (inc) to 6.3.2 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
This vulnerability can cause the Linux kernel to crash unexpectedly (kernel panic) if a device provides bad data in the CHDBOFF or ERDBOFF registers. Such crashes can lead to system instability, downtime, and potential loss of data or service availability.
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's MHI host driver where the values read from the CHDBOFF and ERDBOFF registers are not properly range-checked. If these values are outside the valid range of the MHI register space, it can lead to the calculation of an invalid address, which subsequently causes a kernel panic (system crash). The fix involves adding range checks to these register values to prevent crashes caused by bad data from the device.