CVE-2023-53750
BaseFortify
Publication date: 2025-12-08
Last updated on: 2025-12-08
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| freescale | pinctrl | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory out of bounds error in the Linux kernel's freescale pinctrl driver. Specifically, when the number of configurations (num_configs) is 1, the code incorrectly tries to access configuration index 1, which does not exist. This leads to accessing memory beyond the allocated bounds, which is detected by KASAN (Kernel Address Sanitizer). The fix involves adjusting the code to only access configs[1] when num_configs is 2.
How can this vulnerability impact me? :
This vulnerability can lead to memory corruption or crashes in the Linux kernel due to out of bounds memory access. Such issues can potentially be exploited to cause system instability or security breaches, depending on the context in which the vulnerable driver is used.