PT-2025-40200 · Linux+1 · Linux Kernel+1

Published

2025-07-11

·

Updated

2025-11-19

·

CVE-2023-53493

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel’s qaic component related to insufficient bounds checking within the decode message() function. The issue arises from a lack of proper validation of message lengths and header sizes, potentially leading to memory corruption during the decoding process. Specifically, the patch addresses concerns by copying bounds checking from encode message() to decode message(), ensuring sufficient space for headers and preventing negative size calculations. It also includes checks to prevent the trans hdr->len from being below a minimum size and utilizes size add() to prevent integer overflows. The decode passthrough() function is particularly susceptible to memory corruption if these checks are not in place.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-16122
CVE-2023-53493
SUSE-SU-2025:03600-1
SUSE-SU-2025:03634-1
SUSE-SU-2025:20851-1
SUSE-SU-2025:20861-1
SUSE-SU-2025:20870-1
SUSE-SU-2025:20898-1
SUSE-SU-2025:3751-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4141-1

Affected Products

Linux Kernel
Suse