CVE-2023-53654

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53654

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation before accessing cgx and lmac with the addition of new MAC blocks like CN10K RPM and CN10KB RPM_USX, LMACs are noncontiguous and CGX blocks are also noncontiguous. But during RVU driver initialization, the driver is assuming they are contiguous and trying to access cgx or lmac with their id which is resulting in kernel panic. This patch fixes the issue by adding proper checks. [ 23.219150] pc : cgx_lmac_read+0x38/0x70 [ 23.219154] lr : rvu_program_channels+0x3f0/0x498 [ 23.223852] sp : ffff000100d6fc80 [ 23.227158] x29: ffff000100d6fc80 x28: ffff00010009f880 x27: 000000000000005a [ 23.234288] x26: ffff000102586768 x25: 0000000000002500 x24: fffffffffff0f000

References
Link Resource
https://git.kernel.org/stable/c/79ebb53772c95d3a6ae51b3c65f9985fdd430df6 Patch
https://git.kernel.org/stable/c/a5485a943193e55c79150382e6461e8ea759e96e Patch
https://git.kernel.org/stable/c/b04872e15f3df62cb2fd530950f769626e1ef489 Patch
https://git.kernel.org/stable/c/e425e2ba933618ee5ec8e4f3eb341efeb6c9ddef Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Feb 2026, 22:24

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/79ebb53772c95d3a6ae51b3c65f9985fdd430df6 - () https://git.kernel.org/stable/c/79ebb53772c95d3a6ae51b3c65f9985fdd430df6 - Patch
References () https://git.kernel.org/stable/c/a5485a943193e55c79150382e6461e8ea759e96e - () https://git.kernel.org/stable/c/a5485a943193e55c79150382e6461e8ea759e96e - Patch
References () https://git.kernel.org/stable/c/b04872e15f3df62cb2fd530950f769626e1ef489 - () https://git.kernel.org/stable/c/b04872e15f3df62cb2fd530950f769626e1ef489 - Patch
References () https://git.kernel.org/stable/c/e425e2ba933618ee5ec8e4f3eb341efeb6c9ddef - () https://git.kernel.org/stable/c/e425e2ba933618ee5ec8e4f3eb341efeb6c9ddef - Patch

07 Oct 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-07 16:15

Updated : 2026-02-03 22:24

NVD link : CVE-2023-53654

Mitre link : CVE-2023-53654

CVE.ORG link : CVE-2023-53654

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo