What is CVE-2023-53769?

CVE-2023-53769 is a critical-severity vulnerability in Linux. CVSS score: 9.3/10. Published 2025-12-08.

How severe is CVE-2023-53769?

Critical severity. CVSS v3 base score is 9.3 out of 10.

Vulnerability in Linux

CVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy whole messages in or out as needed before doing any computation on them.

EPSS: 0.001 (1.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.3 (Critical). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Linux — versions d5af44dde5461d125d1602ac913ab5c6bdf09b8b, 5.19, 0

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67
416baaa9-dc9f-4396-8d5f-8c081fb06d67
416baaa9-dc9f-4396-8d5f-8c081fb06d67
416baaa9-dc9f-4396-8d5f-8c081fb06d67

Frequently asked questions

What is CVE-2023-53769?: CVE-2023-53769 is a critical-severity vulnerability in Linux. CVSS score: 9.3/10. Published 2025-12-08.
How severe is CVE-2023-53769?: Critical severity. CVSS v3 base score is 9.3 out of 10.