CVE-2023-53703 — Incorrect Bitwise Shift of Integer in Linux
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 93.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 22
Description
In the Linux kernel, the following vulnerability has been resolved:
HID: amd_sfh: Fix for shift-out-of-bounds
Shift operation of 'exp' and 'shift' variables exceeds the maximum number
of shift values in the u32 range leading to UBSAN shift-out-of-bounds.
...
[ 6.120512] UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c:149:50
[ 6.120598] shift exponent 104 is too large for 64-bit type 'long unsigned int'
[ 6.120659] CPU: 4 PID: 96 Comm: kworker/4:1 Not tainted 6.4.0a…
Affected Packages4 packages
▶CVEListV5linux/linux93ce5e0231d79189be4d9e5f9295807b18941419 — 5a45ed1ae34bb0e68944471f4bafb68e0a572791+3
🔴Vulnerability Details
3GHSA▶
GHSA-rmv6-m884-3827: In the Linux kernel, the following vulnerability has been resolved:
HID: amd_sfh: Fix for shift-out-of-bounds
Shift operation of 'exp' and 'shift' v↗2025-10-22
OSV▶
CVE-2023-53703: In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Fix for shift-out-of-bounds Shift operation of 'exp' and 'shift' var↗2025-10-22