CVE-2023-53703
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-22

Last updated on: 2025-10-22

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Fix for shift-out-of-bounds Shift operation of 'exp' and 'shift' variables exceeds the maximum number of shift values in the u32 range leading to UBSAN shift-out-of-bounds. ... [ 6.120512] UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c:149:50 [ 6.120598] shift exponent 104 is too large for 64-bit type 'long unsigned int' [ 6.120659] CPU: 4 PID: 96 Comm: kworker/4:1 Not tainted 6.4.0amd_1-next-20230519-dirty #10 [ 6.120665] Hardware name: AMD Birman-PHX/Birman-PHX, BIOS SFH_with_HPD_SEN.FD 04/05/2023 [ 6.120667] Workqueue: events amd_sfh_work_buffer [amd_sfh] [ 6.120687] Call Trace: [ 6.120690] <TASK> [ 6.120694] dump_stack_lvl+0x48/0x70 [ 6.120704] dump_stack+0x10/0x20 [ 6.120707] ubsan_epilogue+0x9/0x40 [ 6.120716] __ubsan_handle_shift_out_of_bounds+0x10f/0x170 [ 6.120720] ? psi_group_change+0x25f/0x4b0 [ 6.120729] float_to_int.cold+0x18/0xba [amd_sfh] [ 6.120739] get_input_rep+0x57/0x340 [amd_sfh] [ 6.120748] ? __schedule+0xba7/0x1b60 [ 6.120756] ? __pfx_get_input_rep+0x10/0x10 [amd_sfh] [ 6.120764] amd_sfh_work_buffer+0x91/0x180 [amd_sfh] [ 6.120772] process_one_work+0x229/0x430 [ 6.120780] worker_thread+0x4a/0x3c0 [ 6.120784] ? __pfx_worker_thread+0x10/0x10 [ 6.120788] kthread+0xf7/0x130 [ 6.120792] ? __pfx_kthread+0x10/0x10 [ 6.120795] ret_from_fork+0x29/0x50 [ 6.120804] </TASK> ... Fix this by adding the condition to validate shift ranges.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-22
Last Modified
2025-10-22
Generated
2026-06-16
AI Q&A
2025-10-22
EPSS Evaluated
2026-06-14
NVD
CVE-2023-53703
EUVD
EUVD-2023-60025
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a shift-out-of-bounds error in the Linux kernel's amd_sfh driver. It occurs because the shift operation on certain variables ('exp' and 'shift') exceeds the maximum allowed shift value for a 32-bit unsigned integer, leading to undefined behavior detected by the Undefined Behavior Sanitizer (UBSAN). The issue is fixed by adding validation to ensure the shift values are within acceptable ranges.

Impact Analysis

The vulnerability can cause undefined behavior in the kernel, potentially leading to system instability or crashes when the affected driver performs invalid shift operations. This could affect system reliability but there is no explicit information about exploitation or further impacts.

Detection Guidance

This vulnerability can be detected by checking the system logs for UBSAN (Undefined Behavior Sanitizer) shift-out-of-bounds errors related to the amd_sfh driver. Look for log entries similar to: '[ 6.120512] UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c'. You can use commands like 'dmesg | grep -i ubsan' or 'journalctl -k | grep -i ubsan' to find such messages in the kernel logs.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a version where this vulnerability is fixed. The fix includes adding validation for shift ranges in the amd_sfh driver to prevent shift-out-of-bounds errors. Until the update is applied, monitoring logs for UBSAN errors and avoiding use of affected hardware or drivers if possible may reduce risk.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-53703. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart