CVE-2023-53493

published 2025-10-01

CVE-2023-53493: In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds checking in decode_message() Copy the bounds checking from…

Priority P3 39 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

In the Linux kernel, the following vulnerability has been resolved:

accel/qaic: tighten bounds checking in decode_message()

Copy the bounds checking from encode_message() to decode_message().

This patch addresses the following concerns. Ensure that there is
enough space for at least one header so that we don't have a negative
size later.

if (msg_hdr_len data.

if (msg_len > msg_hdr_len - sizeof(*trans_hdr))
return -EINVAL;

Check that the trans_hdr->len is not below the minimum size:

if (hdr_len data, in_trans->data, len - sizeof(in_trans->hdr));

And finally, use size_add() to prevent an integer overflow:

if (size_add(msg_len, hdr_len) > msg_hdr_len)

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.4.11-1 (forky)	linux 6.4.11-1 (forky)
linux	linux	—	—
linux	linux	>= 129776ac2e38231fa9c02ce20e116c99de291666 < 57d14cb3bae4619ce2fb5235cb318c3d5d8f53fd	57d14cb3bae4619ce2fb5235cb318c3d5d8f53fd
linux	linux	>= 129776ac2e38231fa9c02ce20e116c99de291666 < 51b56382ed2a2b03347372272362b3baa623ed1e	51b56382ed2a2b03347372272362b3baa623ed1e
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.4.11-1	6.4.11-1
linux	linux_kernel	>= 0 < 6.4.11-1	6.4.11-1
linux	linux_kernel	>= 6.4 < 6.4.7	6.4.7

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv 7.8 HIGH

vendor_debian 7.8 LOW

vendor_redhat 7.8 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.