CVE-2023-53750
Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-12-08

Last updated on: 2025-12-08

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: pinctrl: freescale: Fix a memory out of bounds when num_configs is 1 The config passed in by pad wakeup is 1, when num_configs is 1, Configuration [1] should not be fetched, which will be detected by KASAN as a memory out of bounds condition. Modify to get configs[1] when num_configs is 2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-08
Last Modified
2025-12-08
Generated
2026-07-06
AI Q&A
2025-12-08
EPSS Evaluated
2026-07-05
NVD
CVE-2023-53750
EUVD
EUVD-2023-60078

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
freescale pinctrl *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a memory out of bounds error in the Linux kernel's freescale pinctrl driver. Specifically, when the number of configurations (num_configs) is 1, the code incorrectly tries to access configuration index 1, which does not exist. This leads to accessing memory beyond the allocated bounds, which is detected by KASAN (Kernel Address Sanitizer). The fix involves adjusting the code to only access configs[1] when num_configs is 2.

Impact Analysis

This vulnerability can lead to memory corruption or crashes in the Linux kernel due to out of bounds memory access. Such issues can potentially be exploited to cause system instability or security breaches, depending on the context in which the vulnerable driver is used.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-53750. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart