Out-of-bounds Read in Linux
CVE-2023-53465
In the Linux kernel, the following vulnerability has been resolved: soundwire: qcom: fix storing port config out-of-bounds The 'qcom_swrm_ctrl->pconfig' has size of QCOM_SDW_MAX_PORTS (14), however we index it starting from 1, not 0, to match real port numbers. This can lead to writing port config past 'pconfig' bounds and overwriting next member of 'qcom_swrm_ctrl' struct. Reported also by smatch: drivers/soundwire/qcom.c:1269 qcom_swrm_get_port_config() error: buffer overflow 'ctrl->pconfig' 14 <= 14
Vulnerability class: Buffer Overflow
EPSS: 0.002 (6.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 9916c02ccd74e672b62dd1a9017ac2f237ebf512, 5.13, 0
- Linux Linux_kernel
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2023-53465?
- CVE-2023-53465 is a high-severity vulnerability in Linux, classified under Out-of-bounds Read. CVSS score: 7.8/10. Published 2025-10-01.
- How severe is CVE-2023-53465?
- High severity. CVSS v3 base score is 7.8 out of 10.