CVE-2023-53205 — Out-of-bounds Write in Linux

CWE-787 — Out-of-bounds WriteCWE-367 — Time-of-check Time-of-use (TOCTOU) Race Condition5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 95.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 15

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid out-of-bound accesses to the cpu arrays.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDlinux/linux_kernel5.13 — 5.15.121+2
▶Debianlinux/linux_kernel< 6.1.52-1+2
▶CVEListV5linux/linux87e28a15c42cc592009c32a8c20e5789059027c2 — a9ccf140a2a03a0ae82be4bdfbdd17bdaea72ff5+4
▶debiandebian/linux< linux 6.1.52-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53205: In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do ch↗2025-09-15
▶
GHSA
GHSA-9r2v-25mx-g9gj: In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do↗2025-09-15
▶

📋Vendor Advisories

2
Red Hat
kernel: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler↗2025-09-15
▶
Debian
CVE-2023-53205: linux - In the Linux kernel, the following vulnerability has been resolved: KVM: s390/d...↗2023
▶
CVE-2023-53205 — Out-of-bounds Write in Linux | cvebase