PT-2025-40200 · Linux+1 · Linux Kernel+1
Published
2025-07-11
·
Updated
2025-11-19
·
CVE-2023-53493
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s
qaic component related to insufficient bounds checking within the decode message() function. The issue arises from a lack of proper validation of message lengths and header sizes, potentially leading to memory corruption during the decoding process. Specifically, the patch addresses concerns by copying bounds checking from encode message() to decode message(), ensuring sufficient space for headers and preventing negative size calculations. It also includes checks to prevent the trans hdr->len from being below a minimum size and utilizes size add() to prevent integer overflows. The decode passthrough() function is particularly susceptible to memory corruption if these checks are not in place.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Suse