CVE-2023-53493 — Linux vulnerability
5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 94.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 1
Description
In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: tighten bounds checking in decode_message()
Copy the bounds checking from encode_message() to decode_message().
This patch addresses the following concerns. Ensure that there is
enough space for at least one header so that we don't have a negative
size later.
if (msg_hdr_len data.
if (msg_len > msg_hdr_len - sizeof(*trans_hdr))
return -EINVAL;
Check that the trans_hdr->len is not below the minimum size:
if (hd…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages4 packages
▶CVEListV5linux/linux129776ac2e38231fa9c02ce20e116c99de291666 — 57d14cb3bae4619ce2fb5235cb318c3d5d8f53fd+2
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-2fq9-3mp7-xw7v: In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: tighten bounds checking in decode_message()
Copy the bounds checking↗2025-10-01
OSV▶
CVE-2023-53493: In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds checking in decode_message() Copy the bounds checking f↗2025-10-01