CVE-2023-53646 — Out-of-bounds Read in Linux

CWE-125 — Out-of-bounds Read5 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 95.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 7

Description

In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehp_oa_b_counters Arrays passed to reg_in_range_table should end with empty record. The patch solves KASAN detected bug with signature: BUG: KASAN: global-out-of-bounds in xehp_is_valid_b_counter_addr+0x2c7/0x350 [i915] Read of size 4 at addr ffffffffa1555d90 by task perf/1518 CPU: 4 PID: 1518 Comm: perf Tainted: G U 6.4.0-kasan_438-g3303d06107f3+ #1 Hardware name: Intel Corporation Meteor Lak…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages4 packages

▶NVDlinux/linux_kernel6.2 — 6.4.7+1
▶Debianlinux/linux_kernel< 6.4.11-1+1
▶CVEListV5linux/linux0fa9349dda030fa847b36f880a5eea25c3202b66 — 21d92025e80629fd5c25cd6751f8cf38c784dd4a+2
▶debiandebian/linux< linux 6.4.11-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-v24g-q75p-xqch: In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehp_oa_b_counters Arrays passed to reg_in_range_↗2025-10-07
▶
OSV
CVE-2023-53646: In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehp_oa_b_counters Arrays passed to reg_in_range_ta↗2025-10-07
▶

📋Vendor Advisories

2
Red Hat
kernel: drm/i915/perf: add sentinel to xehp_oa_b_counters↗2025-10-07
▶
Debian
CVE-2023-53646: linux - In the Linux kernel, the following vulnerability has been resolved: drm/i915/pe...↗2023
▶