CVE-2023-53524Integer Overflow or Wraparound in Linux

Severity
7.8HIGHNVD
EPSS
0.0%
top 96.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer overflow occurs in the iwl_write_to_user_buf() function, which is called by the iwl_dbgfs_monitor_data_read() function. static bool iwl_write_to_user_buf(char __user *user_buf, ssize_t count, void *buf, ssize_t *size, ssize_t *bytes_copied) { int buf_size_left = count - *bytes_copied; buf_size_left = buf_size_left - (buf_size_left % sizeof(u32)); i

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

NVDlinux/linux_kernel5.05.4.244+4
Debianlinux/linux_kernel< 5.10.191-1+3
CVEListV5linux/linuxf7805b33f9b13a87b1fcf9dfbc3dcbce281a14360ad8dd870aa187d0c21d032bb2c6433559075eec+6
debiandebian/linux< linux 6.1.37-1 (bookworm)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-pvr4-g739-vh5v: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer ov2025-10-01
OSV
CVE-2023-53524: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer over2025-10-01

📋Vendor Advisories

2
Red Hat
kernel: Linux kernel: Integer overflow in iwlwifi debugfs function2025-10-01
Debian
CVE-2023-53524: linux - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi...2023