Vulnerability in Linux

CVE-2023-53750

In the Linux kernel, the following vulnerability has been resolved: pinctrl: freescale: Fix a memory out of bounds when num_configs is 1 The config passed in by pad wakeup is 1, when num_configs is 1, Configuration [1] should not be fetched, which will be detected by KASAN as a memory out of bounds condition. Modify to get configs[1] when num_configs is 2.

EPSS: 0.002 (6.1th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions f60c9eac54af28d7b5651fe49944bfd5098550e6, 6.2, 0

References