CVE-2023-53840
BaseFortify
Publication date: 2025-12-09
Last updated on: 2025-12-09
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential out-of-bound memory access in the Linux kernel's USB early xHCI driver (xhci-dbc). Specifically, if the function xdbc_bulk_write() fails, the buffer 'buf' may contain arbitrary data and is not guaranteed to be NULL terminated when xdbc_trace() is called. This can lead to accessing memory beyond the intended buffer. The fix involves reserving an extra byte in the buffer, which is zeroed automatically, to prevent such out-of-bound access.
How can this vulnerability impact me? :
The vulnerability could lead to out-of-bound memory access, which may cause system instability, crashes, or potentially allow an attacker to read or corrupt memory. This could affect the reliability and security of systems using the affected Linux kernel USB driver.