CVE-2023-54057
published 2025-12-24CVE-2023-54057: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpiid'…
PriorityP429low5.5
EPSS
0.21%
11.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.
Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.20-1 (bookworm) | linux 6.1.20-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 5e97dc748d13fad582136ba0c8cec215c7aeeb17 | 5e97dc748d13fad582136ba0c8cec215c7aeeb17 |
| linux | linux | >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9 | f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9 |
| linux | linux | >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < c513043e0afe6a8ba79d00af358655afabb576d2 | c513043e0afe6a8ba79d00af358655afabb576d2 |
| linux | linux | >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60 | 2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60 |
| linux | linux | >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < 63cd11165e5e0ea2012254c764003eda1f9adb7d | 63cd11165e5e0ea2012254c764003eda1f9adb7d |
| linux | linux | >= ca3bf5d47cec8b7614bcb2e9132c40081d6d81db < b6b26d86c61c441144c72f842f7469bb686e1211 | b6b26d86c61c441144c72f842f7469bb686e1211 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 0 < 6.1.20-1 | 6.1.20-1 |
| linux | linux_kernel | >= 4.7.0 < 5.4.237 | 5.4.237 |
| linux | linux_kernel | >= 5.11.0 < 5.15.103 | 5.15.103 |
| linux | linux_kernel | >= 5.16.0 < 6.1.16 | 6.1.16 |
| linux | linux_kernel | >= 5.5.0 < 5.10.175 | 5.10.175 |
| linux | linux_kernel | >= 6.2.0 < 6.2.3 | 6.2.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2023-54057 [LOW] CWE-120 kernel: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
kernel: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.
Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.
A stack buffer overflow vulnerability was found in the Linux kernel's AMD IOMMU driver. The parse_ivrs_acpihid() function uses sscanf() to parse the ivrs_acpihid kernel command-line parameter without specifying a field width limit. An overly long ACPI HID string can overflow the fixed-size acpiid buffer on the stack.
Sta
Debian
CVE-2023-54057: linux - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: ...
vendor_debian·2023
CVE-2023-54057 CVE-2023-54057: linux - In the Linux kernel, the following vulnerability has been resolved: iommu/amd: ...
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow, because the string specifier in the format string sscanf() has no width limitation. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
Scope: local
bookworm: resolved (fixed in 6.1.20-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.20-1)
sid: resolved (fixed in 6.1.20-1)
trixie: resolved (fixed in 6.1.20-1)
OSV
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
osv·2025-12-24
CVE-2023-54057 iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.
Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.
GHSA
GHSA-25gw-vwhh-r379: In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
T
ghsa_unreviewed·2025-12-24
CVE-2023-54057 GHSA-25gw-vwhh-r379: In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
T
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.
Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.
OSV
CVE-2023-54057: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The
osv·2025-12-24
CVE-2023-54057 CVE-2023-54057: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow, because the string specifier in the format string sscanf() has no width limitation. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54057 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54057 CVE-2023-54057 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54057 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.
Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
kernel-rt
Bugzilla
CVE-2023-54057 kernel: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
bugzilla·2025-12-24
CVE-2023-54057 [LOW] CVE-2023-54057 kernel: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
CVE-2023-54057 kernel: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
In the Linux kernel, the following vulnerability has been resolved:
iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
The 'acpiid' buffer in the parse_ivrs_acpihid function may overflow,
because the string specifier in the format string sscanf()
has no width limitation.
Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122427-CVE-2023-54057-f0c5@gregkh/T
https://git.kernel.org/stable/c/2ae19ac3ea82a5b87a81c10adbb497c9e58bdd60https://git.kernel.org/stable/c/5e97dc748d13fad582136ba0c8cec215c7aeeb17https://git.kernel.org/stable/c/63cd11165e5e0ea2012254c764003eda1f9adb7dhttps://git.kernel.org/stable/c/b6b26d86c61c441144c72f842f7469bb686e1211https://git.kernel.org/stable/c/c513043e0afe6a8ba79d00af358655afabb576d2https://git.kernel.org/stable/c/f2a5ec7f7b28f9b9cd5fac232ff51019a7f7b9e9
2025-12-24
Published