Vulnerability-Lookup

SUSE-SU-2025:4301-1

Vulnerability from csaf_suse - Published: 2025-11-28 12:59 - Updated: 2025-11-28 12:59

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). - CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211). - CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230). - CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630). - CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224). - CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182). - CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161). - CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320). - CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302). - CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286). - CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319 bsc#1252236). - CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317). - CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512). - CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595). - CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202). - CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032). - CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205). - CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296). - CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455). - CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400). - CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379). - CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721). - CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702). - CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704). - CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230). - CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114). - CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232). - CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233). - CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177). - CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804). - CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047). - CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044). - CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). - CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). - CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039). - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035). - CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069). - CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062). - CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688). - CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858). - CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826). - CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848). - CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789). - CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774). - CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918). The following non security issues were fixed: - ACPI: battery: Add synchronization between interface updates (git-fixes). - KVM: PPC: Fix misleading interrupts comment in kvmppc_prepare_to_enter() (bsc#1215199). - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update() (git-fixes). - KVM: x86: Process 'guest stopped request' once per guest time update (git-fixes). - bpf: Allow helper bpf_get_[ns_]current_pid_tgid() for all prog types (bsc#1252364). - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (stable-fixes git-fixes). - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() (git-fixes). - ext4: fix checks for orphan inodes (bsc#1250119). - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (git-fixes). - kdb: Replace deprecated strcpy() with memmove() in vkdb_printf() (bsc#1252939). - module: Prevent silent truncation of module name in delete_module(2) (git-fixes). - net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754). - netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237). No CVE available yet, please see the bugzilla ticket referenced. - perf/x86/intel: Allow to update user space GPRs from PEBS records (git-fixes). - perf/x86/intel: Fix crash in icl_update_topdown_event() (git-fixes). - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine (git-fixes). - powerpc/boot: Fix build with gcc 15 (bsc#1215199). - powerpc/kvm: Fix ifdef to remove build warning (bsc#1215199). - powerpc/powernv/pci: Fix underflow and leak issue (bsc#1215199). - powerpc/pseries/msi: Fix potential underflow and leak issue (bsc#1215199). - powerpc: export MIN RMA size (bsc#1236743 ltc#211409). - powerpc: floppy: Add missing checks after DMA map (bsc#1215199). - powerpc: increase MIN RMA size for CAS negotiation (bsc#1236743 ltc#211409 bsc#1252269 ltc#215957). - proc: fix missing pde_set_flags() for net proc files (bsc#1248630) - proc: fix type confusion in pde_set_flags() (bsc#1248630) - sched/idle: Conditionally handle tick broadcast in default_idle_call() (bsc#1248517). - serial: jsm: fix NPE during jsm_uart_port_init (git fixes, bsc#1246244). - skmsg: Return copied bytes in sk_msg_memcopy_from_iter (bsc#1250650). - smb: client: fix crypto buffers in non-linear memory (bsc#1250491, bsc#1239206). - smb: client: fix potential cfid UAF in smb2_query_info_compound (bsc#1248886). - tcp_bpf: Fix copied value in tcp_bpf_sendmsg (bsc#1250650). - tracing: Remove unneeded goto out logic (bsc#1249286). - x86/idle: Sanitize X86_BUG_AMD_E400 handling (bsc#1248517).

Patchnames: SUSE-2025-4301,SUSE-SLE-Module-Live-Patching-15-SP6-2025-4301,SUSE-SLE-Module-RT-15-SP6-2025-4301,openSUSE-SLE-15.6-2025-4301

CVE-2023-53538

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP6:kernel-livepatch-6_4_0-150600_10_58-rt-1-150600.1.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:cluster-md-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:dlm-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:gfs2-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:kernel-devel-rt-6.4.0-150600.10.58.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:kernel-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:kernel-rt-devel-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:kernel-rt_debug-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:kernel-rt_debug-devel-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:kernel-source-rt-6.4.0-150600.10.58.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:kernel-syms-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Real Time Module 15 SP6:ocfs2-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:cluster-md-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:dlm-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:gfs2-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-devel-rt-6.4.0-150600.10.58.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt-devel-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt-extra-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt-livepatch-devel-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt-optional-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt-vdso-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt_debug-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt_debug-devel-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-rt_debug-vdso-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-source-rt-6.4.0-150600.10.58.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kernel-syms-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:kselftests-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:ocfs2-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.6:reiserfs-kmp-rt-6.4.0-150600.10.58.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2023-53539

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53540

6.5 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53541

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53543

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53545

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53546

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53548

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53550

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53552

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53553

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53554

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53555

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53556

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53557

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53558

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53559

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53560

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53563

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53568

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53570

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53572

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53574

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2023-53575

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53577

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53579

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53580

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53581

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53583

0 (None)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:N

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53585

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53588

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53593

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53596

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53597

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53599

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53600

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53601

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53602

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53603

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53611

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53613

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53615

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53616

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53617

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53618

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53619

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53621

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53622

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53631

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53632

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53633

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53638

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53645

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53646

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53647

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53648

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53649

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53650

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53652

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53653

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53654

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53656

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53657

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53658

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53659

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2023-53660

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53662

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53663

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53665

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53666

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53668

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53670

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53672

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53673

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2023-53674

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53681

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53686

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53687

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53693

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53697

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53698

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53699

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53703

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53704

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53707

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53708

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53711

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53713

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2023-53718

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53721

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53722

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2023-53725

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2023-53726

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53727

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53728

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53729

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53730

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2023-53733

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2025-38008

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-38539

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-38552

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-38653

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-38699

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-38700

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-38718

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39673

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39676

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39683

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39697

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39702

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39756

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39794

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39797

5.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39812

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39813

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39828

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39841

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39851

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39866

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39876

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39881

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39895

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39902

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39911

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39931

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39934

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39937

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39938

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39945

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39946

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39947

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39948

4.3 (Medium)


                
                  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39949

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39952

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39955

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39957

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2025-39965

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39967

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39968

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2025-39969

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39970

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39971

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39972

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39973

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2025-39978

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2025-39981

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2025-39982

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39985

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39986

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39987

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39988

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39991

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39993

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39994

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39995

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39996

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-39997

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40000

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40005

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40010

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40011

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40013

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40016

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact low

CVE-2025-40018

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2025-40019

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact important

CVE-2025-40020

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40029

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40032

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40035

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40036

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40043

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40044

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40049

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40051

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40052

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40056

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40058

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40060

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40061

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40062

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40071

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40078

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40080

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40082

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40085

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40087

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40088

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40096

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

CVE-2025-40100

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 30 products, the same list as for CVE-2023-53538

Threats

Impact moderate

References

803 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1012628	self
https://bugzilla.suse.com/1214954	self
https://bugzilla.suse.com/1215143	self
https://bugzilla.suse.com/1215199	self
https://bugzilla.suse.com/1216396	self
https://bugzilla.suse.com/1220419	self
https://bugzilla.suse.com/1236743	self
https://bugzilla.suse.com/1239206	self
https://bugzilla.suse.com/1244939	self
https://bugzilla.suse.com/1246244	self
https://bugzilla.suse.com/1248211	self
https://bugzilla.suse.com/1248230	self
https://bugzilla.suse.com/1248517	self
https://bugzilla.suse.com/1248630	self
https://bugzilla.suse.com/1248754	self
https://bugzilla.suse.com/1248886	self
https://bugzilla.suse.com/1249161	self
https://bugzilla.suse.com/1249182	self
https://bugzilla.suse.com/1249224	self
https://bugzilla.suse.com/1249286	self
https://bugzilla.suse.com/1249302	self
https://bugzilla.suse.com/1249317	self
https://bugzilla.suse.com/1249319	self
https://bugzilla.suse.com/1249320	self
https://bugzilla.suse.com/1249512	self
https://bugzilla.suse.com/1249595	self
https://bugzilla.suse.com/1249608	self
https://bugzilla.suse.com/1250032	self
https://bugzilla.suse.com/1250119	self
https://bugzilla.suse.com/1250202	self
https://bugzilla.suse.com/1250205	self
https://bugzilla.suse.com/1250237	self
https://bugzilla.suse.com/1250274	self
https://bugzilla.suse.com/1250296	self
https://bugzilla.suse.com/1250379	self
https://bugzilla.suse.com/1250400	self
https://bugzilla.suse.com/1250455	self
https://bugzilla.suse.com/1250491	self
https://bugzilla.suse.com/1250519	self
https://bugzilla.suse.com/1250650	self
https://bugzilla.suse.com/1250702	self
https://bugzilla.suse.com/1250704	self
https://bugzilla.suse.com/1250721	self
https://bugzilla.suse.com/1250742	self
https://bugzilla.suse.com/1250946	self
https://bugzilla.suse.com/1251024	self
https://bugzilla.suse.com/1251027	self
https://bugzilla.suse.com/1251028	self
https://bugzilla.suse.com/1251031	self
https://bugzilla.suse.com/1251035	self
https://bugzilla.suse.com/1251038	self
https://bugzilla.suse.com/1251043	self
https://bugzilla.suse.com/1251045	self
https://bugzilla.suse.com/1251052	self
https://bugzilla.suse.com/1251053	self
https://bugzilla.suse.com/1251054	self
https://bugzilla.suse.com/1251056	self
https://bugzilla.suse.com/1251057	self
https://bugzilla.suse.com/1251059	self
https://bugzilla.suse.com/1251060	self
https://bugzilla.suse.com/1251065	self
https://bugzilla.suse.com/1251066	self
https://bugzilla.suse.com/1251067	self
https://bugzilla.suse.com/1251068	self
https://bugzilla.suse.com/1251071	self
https://bugzilla.suse.com/1251076	self
https://bugzilla.suse.com/1251079	self
https://bugzilla.suse.com/1251081	self
https://bugzilla.suse.com/1251083	self
https://bugzilla.suse.com/1251084	self
https://bugzilla.suse.com/1251100	self
https://bugzilla.suse.com/1251105	self
https://bugzilla.suse.com/1251106	self
https://bugzilla.suse.com/1251108	self
https://bugzilla.suse.com/1251113	self
https://bugzilla.suse.com/1251114	self
https://bugzilla.suse.com/1251119	self
https://bugzilla.suse.com/1251123	self
https://bugzilla.suse.com/1251126	self
https://bugzilla.suse.com/1251132	self
https://bugzilla.suse.com/1251134	self
https://bugzilla.suse.com/1251143	self
https://bugzilla.suse.com/1251146	self
https://bugzilla.suse.com/1251150	self
https://bugzilla.suse.com/1251152	self
https://bugzilla.suse.com/1251153	self
https://bugzilla.suse.com/1251159	self
https://bugzilla.suse.com/1251161	self
https://bugzilla.suse.com/1251170	self
https://bugzilla.suse.com/1251177	self
https://bugzilla.suse.com/1251180	self
https://bugzilla.suse.com/1251206	self
https://bugzilla.suse.com/1251215	self
https://bugzilla.suse.com/1251216	self
https://bugzilla.suse.com/1251222	self
https://bugzilla.suse.com/1251230	self
https://bugzilla.suse.com/1251232	self
https://bugzilla.suse.com/1251233	self
https://bugzilla.suse.com/1251247	self
https://bugzilla.suse.com/1251268	self
https://bugzilla.suse.com/1251269	self
https://bugzilla.suse.com/1251270	self
https://bugzilla.suse.com/1251282	self
https://bugzilla.suse.com/1251283	self
https://bugzilla.suse.com/1251286	self
https://bugzilla.suse.com/1251290	self
https://bugzilla.suse.com/1251319	self
https://bugzilla.suse.com/1251321	self
https://bugzilla.suse.com/1251323	self
https://bugzilla.suse.com/1251328	self
https://bugzilla.suse.com/1251529	self
https://bugzilla.suse.com/1251721	self
https://bugzilla.suse.com/1251732	self
https://bugzilla.suse.com/1251742	self
https://bugzilla.suse.com/1251743	self
https://bugzilla.suse.com/1251746	self
https://bugzilla.suse.com/1251748	self
https://bugzilla.suse.com/1251749	self
https://bugzilla.suse.com/1251750	self
https://bugzilla.suse.com/1251754	self
https://bugzilla.suse.com/1251755	self
https://bugzilla.suse.com/1251756	self
https://bugzilla.suse.com/1251758	self
https://bugzilla.suse.com/1251759	self
https://bugzilla.suse.com/1251760	self
https://bugzilla.suse.com/1251762	self
https://bugzilla.suse.com/1251763	self
https://bugzilla.suse.com/1251764	self
https://bugzilla.suse.com/1251769	self
https://bugzilla.suse.com/1251771	self
https://bugzilla.suse.com/1251772	self
https://bugzilla.suse.com/1251777	self
https://bugzilla.suse.com/1251780	self
https://bugzilla.suse.com/1251804	self
https://bugzilla.suse.com/1251810	self
https://bugzilla.suse.com/1251930	self
https://bugzilla.suse.com/1251967	self
https://bugzilla.suse.com/1252033	self
https://bugzilla.suse.com/1252035	self
https://bugzilla.suse.com/1252039	self
https://bugzilla.suse.com/1252044	self
https://bugzilla.suse.com/1252047	self
https://bugzilla.suse.com/1252051	self
https://bugzilla.suse.com/1252052	self
https://bugzilla.suse.com/1252056	self
https://bugzilla.suse.com/1252060	self
https://bugzilla.suse.com/1252062	self
https://bugzilla.suse.com/1252064	self
https://bugzilla.suse.com/1252065	self
https://bugzilla.suse.com/1252069	self
https://bugzilla.suse.com/1252070	self
https://bugzilla.suse.com/1252072	self
https://bugzilla.suse.com/1252074	self
https://bugzilla.suse.com/1252075	self
https://bugzilla.suse.com/1252078	self
https://bugzilla.suse.com/1252079	self
https://bugzilla.suse.com/1252082	self
https://bugzilla.suse.com/1252083	self
https://bugzilla.suse.com/1252236	self
https://bugzilla.suse.com/1252265	self
https://bugzilla.suse.com/1252269	self
https://bugzilla.suse.com/1252332	self
https://bugzilla.suse.com/1252336	self
https://bugzilla.suse.com/1252346	self
https://bugzilla.suse.com/1252348	self
https://bugzilla.suse.com/1252349	self
https://bugzilla.suse.com/1252364	self
https://bugzilla.suse.com/1252479	self
https://bugzilla.suse.com/1252481	self
https://bugzilla.suse.com/1252489	self
https://bugzilla.suse.com/1252490	self
https://bugzilla.suse.com/1252492	self
https://bugzilla.suse.com/1252495	self
https://bugzilla.suse.com/1252496	self
https://bugzilla.suse.com/1252499	self
https://bugzilla.suse.com/1252534	self
https://bugzilla.suse.com/1252536	self
https://bugzilla.suse.com/1252537	self
https://bugzilla.suse.com/1252550	self
https://bugzilla.suse.com/1252553	self
https://bugzilla.suse.com/1252559	self
https://bugzilla.suse.com/1252561	self
https://bugzilla.suse.com/1252564	self
https://bugzilla.suse.com/1252565	self
https://bugzilla.suse.com/1252566	self
https://bugzilla.suse.com/1252632	self
https://bugzilla.suse.com/1252668	self
https://bugzilla.suse.com/1252678	self
https://bugzilla.suse.com/1252679	self
https://bugzilla.suse.com/1252685	self
https://bugzilla.suse.com/1252688	self
https://bugzilla.suse.com/1252772	self
https://bugzilla.suse.com/1252774	self
https://bugzilla.suse.com/1252775	self
https://bugzilla.suse.com/1252785	self
https://bugzilla.suse.com/1252787	self
https://bugzilla.suse.com/1252789	self
https://bugzilla.suse.com/1252797	self
https://bugzilla.suse.com/1252822	self
https://bugzilla.suse.com/1252826	self
https://bugzilla.suse.com/1252841	self
https://bugzilla.suse.com/1252848	self
https://bugzilla.suse.com/1252849	self
https://bugzilla.suse.com/1252850	self
https://bugzilla.suse.com/1252851	self
https://bugzilla.suse.com/1252854	self
https://bugzilla.suse.com/1252858	self
https://bugzilla.suse.com/1252865	self
https://bugzilla.suse.com/1252866	self
https://bugzilla.suse.com/1252873	self
https://bugzilla.suse.com/1252902	self
https://bugzilla.suse.com/1252904	self
https://bugzilla.suse.com/1252909	self
https://bugzilla.suse.com/1252918	self
https://bugzilla.suse.com/1252939	self
https://www.suse.com/security/cve/CVE-2023-53538/	self
https://www.suse.com/security/cve/CVE-2023-53539/	self
https://www.suse.com/security/cve/CVE-2023-53540/	self
https://www.suse.com/security/cve/CVE-2023-53541/	self
https://www.suse.com/security/cve/CVE-2023-53543/	self
https://www.suse.com/security/cve/CVE-2023-53545/	self
https://www.suse.com/security/cve/CVE-2023-53546/	self
https://www.suse.com/security/cve/CVE-2023-53548/	self
https://www.suse.com/security/cve/CVE-2023-53550/	self
https://www.suse.com/security/cve/CVE-2023-53552/	self
https://www.suse.com/security/cve/CVE-2023-53553/	self
https://www.suse.com/security/cve/CVE-2023-53554/	self
https://www.suse.com/security/cve/CVE-2023-53555/	self
https://www.suse.com/security/cve/CVE-2023-53556/	self
https://www.suse.com/security/cve/CVE-2023-53557/	self
https://www.suse.com/security/cve/CVE-2023-53558/	self
https://www.suse.com/security/cve/CVE-2023-53559/	self
https://www.suse.com/security/cve/CVE-2023-53560/	self
https://www.suse.com/security/cve/CVE-2023-53563/	self
https://www.suse.com/security/cve/CVE-2023-53568/	self
https://www.suse.com/security/cve/CVE-2023-53570/	self
https://www.suse.com/security/cve/CVE-2023-53572/	self
https://www.suse.com/security/cve/CVE-2023-53574/	self
https://www.suse.com/security/cve/CVE-2023-53575/	self
https://www.suse.com/security/cve/CVE-2023-53577/	self
https://www.suse.com/security/cve/CVE-2023-53579/	self
https://www.suse.com/security/cve/CVE-2023-53580/	self
https://www.suse.com/security/cve/CVE-2023-53581/	self
https://www.suse.com/security/cve/CVE-2023-53583/	self
https://www.suse.com/security/cve/CVE-2023-53585/	self
https://www.suse.com/security/cve/CVE-2023-53588/	self
https://www.suse.com/security/cve/CVE-2023-53593/	self
https://www.suse.com/security/cve/CVE-2023-53596/	self
https://www.suse.com/security/cve/CVE-2023-53597/	self
https://www.suse.com/security/cve/CVE-2023-53599/	self
https://www.suse.com/security/cve/CVE-2023-53600/	self
https://www.suse.com/security/cve/CVE-2023-53601/	self
https://www.suse.com/security/cve/CVE-2023-53602/	self
https://www.suse.com/security/cve/CVE-2023-53603/	self
https://www.suse.com/security/cve/CVE-2023-53611/	self
https://www.suse.com/security/cve/CVE-2023-53613/	self
https://www.suse.com/security/cve/CVE-2023-53615/	self
https://www.suse.com/security/cve/CVE-2023-53616/	self
https://www.suse.com/security/cve/CVE-2023-53617/	self
https://www.suse.com/security/cve/CVE-2023-53618/	self
https://www.suse.com/security/cve/CVE-2023-53619/	self
https://www.suse.com/security/cve/CVE-2023-53621/	self
https://www.suse.com/security/cve/CVE-2023-53622/	self
https://www.suse.com/security/cve/CVE-2023-53631/	self
https://www.suse.com/security/cve/CVE-2023-53632/	self
https://www.suse.com/security/cve/CVE-2023-53633/	self
https://www.suse.com/security/cve/CVE-2023-53638/	self
https://www.suse.com/security/cve/CVE-2023-53645/	self
https://www.suse.com/security/cve/CVE-2023-53646/	self
https://www.suse.com/security/cve/CVE-2023-53647/	self
https://www.suse.com/security/cve/CVE-2023-53648/	self
https://www.suse.com/security/cve/CVE-2023-53649/	self
https://www.suse.com/security/cve/CVE-2023-53650/	self
https://www.suse.com/security/cve/CVE-2023-53652/	self
https://www.suse.com/security/cve/CVE-2023-53653/	self
https://www.suse.com/security/cve/CVE-2023-53654/	self
https://www.suse.com/security/cve/CVE-2023-53656/	self
https://www.suse.com/security/cve/CVE-2023-53657/	self
https://www.suse.com/security/cve/CVE-2023-53658/	self
https://www.suse.com/security/cve/CVE-2023-53659/	self
https://www.suse.com/security/cve/CVE-2023-53660/	self
https://www.suse.com/security/cve/CVE-2023-53662/	self
https://www.suse.com/security/cve/CVE-2023-53663/	self
https://www.suse.com/security/cve/CVE-2023-53665/	self
https://www.suse.com/security/cve/CVE-2023-53666/	self
https://www.suse.com/security/cve/CVE-2023-53668/	self
https://www.suse.com/security/cve/CVE-2023-53670/	self
https://www.suse.com/security/cve/CVE-2023-53672/	self
https://www.suse.com/security/cve/CVE-2023-53673/	self
https://www.suse.com/security/cve/CVE-2023-53674/	self
https://www.suse.com/security/cve/CVE-2023-53681/	self
https://www.suse.com/security/cve/CVE-2023-53686/	self
https://www.suse.com/security/cve/CVE-2023-53687/	self
https://www.suse.com/security/cve/CVE-2023-53693/	self
https://www.suse.com/security/cve/CVE-2023-53697/	self
https://www.suse.com/security/cve/CVE-2023-53698/	self
https://www.suse.com/security/cve/CVE-2023-53699/	self
https://www.suse.com/security/cve/CVE-2023-53703/	self
https://www.suse.com/security/cve/CVE-2023-53704/	self
https://www.suse.com/security/cve/CVE-2023-53707/	self
https://www.suse.com/security/cve/CVE-2023-53708/	self
https://www.suse.com/security/cve/CVE-2023-53711/	self
https://www.suse.com/security/cve/CVE-2023-53713/	self
https://www.suse.com/security/cve/CVE-2023-53718/	self
https://www.suse.com/security/cve/CVE-2023-53721/	self
https://www.suse.com/security/cve/CVE-2023-53722/	self
https://www.suse.com/security/cve/CVE-2023-53725/	self
https://www.suse.com/security/cve/CVE-2023-53726/	self
https://www.suse.com/security/cve/CVE-2023-53727/	self
https://www.suse.com/security/cve/CVE-2023-53728/	self
https://www.suse.com/security/cve/CVE-2023-53729/	self
https://www.suse.com/security/cve/CVE-2023-53730/	self
https://www.suse.com/security/cve/CVE-2023-53731/	self
https://www.suse.com/security/cve/CVE-2023-53733/	self
https://www.suse.com/security/cve/CVE-2025-38008/	self
https://www.suse.com/security/cve/CVE-2025-38539/	self
https://www.suse.com/security/cve/CVE-2025-38552/	self
https://www.suse.com/security/cve/CVE-2025-38653/	self
https://www.suse.com/security/cve/CVE-2025-38699/	self
https://www.suse.com/security/cve/CVE-2025-38700/	self
https://www.suse.com/security/cve/CVE-2025-38718/	self
https://www.suse.com/security/cve/CVE-2025-39673/	self
https://www.suse.com/security/cve/CVE-2025-39676/	self
https://www.suse.com/security/cve/CVE-2025-39683/	self
https://www.suse.com/security/cve/CVE-2025-39697/	self
https://www.suse.com/security/cve/CVE-2025-39702/	self
https://www.suse.com/security/cve/CVE-2025-39756/	self
https://www.suse.com/security/cve/CVE-2025-39794/	self
https://www.suse.com/security/cve/CVE-2025-39797/	self
https://www.suse.com/security/cve/CVE-2025-39812/	self
https://www.suse.com/security/cve/CVE-2025-39813/	self
https://www.suse.com/security/cve/CVE-2025-39828/	self
https://www.suse.com/security/cve/CVE-2025-39841/	self
https://www.suse.com/security/cve/CVE-2025-39851/	self
https://www.suse.com/security/cve/CVE-2025-39866/	self
https://www.suse.com/security/cve/CVE-2025-39876/	self
https://www.suse.com/security/cve/CVE-2025-39881/	self
https://www.suse.com/security/cve/CVE-2025-39895/	self
https://www.suse.com/security/cve/CVE-2025-39902/	self
https://www.suse.com/security/cve/CVE-2025-39911/	self
https://www.suse.com/security/cve/CVE-2025-39931/	self
https://www.suse.com/security/cve/CVE-2025-39934/	self
https://www.suse.com/security/cve/CVE-2025-39937/	self
https://www.suse.com/security/cve/CVE-2025-39938/	self
https://www.suse.com/security/cve/CVE-2025-39945/	self
https://www.suse.com/security/cve/CVE-2025-39946/	self
https://www.suse.com/security/cve/CVE-2025-39947/	self
https://www.suse.com/security/cve/CVE-2025-39948/	self
https://www.suse.com/security/cve/CVE-2025-39949/	self
https://www.suse.com/security/cve/CVE-2025-39952/	self
https://www.suse.com/security/cve/CVE-2025-39955/	self
https://www.suse.com/security/cve/CVE-2025-39957/	self
https://www.suse.com/security/cve/CVE-2025-39965/	self
https://www.suse.com/security/cve/CVE-2025-39967/	self
https://www.suse.com/security/cve/CVE-2025-39968/	self
https://www.suse.com/security/cve/CVE-2025-39969/	self
https://www.suse.com/security/cve/CVE-2025-39970/	self
https://www.suse.com/security/cve/CVE-2025-39971/	self
https://www.suse.com/security/cve/CVE-2025-39972/	self
https://www.suse.com/security/cve/CVE-2025-39973/	self
https://www.suse.com/security/cve/CVE-2025-39978/	self
https://www.suse.com/security/cve/CVE-2025-39981/	self
https://www.suse.com/security/cve/CVE-2025-39982/	self
https://www.suse.com/security/cve/CVE-2025-39985/	self
https://www.suse.com/security/cve/CVE-2025-39986/	self
https://www.suse.com/security/cve/CVE-2025-39987/	self
https://www.suse.com/security/cve/CVE-2025-39988/	self
https://www.suse.com/security/cve/CVE-2025-39991/	self
https://www.suse.com/security/cve/CVE-2025-39993/	self
https://www.suse.com/security/cve/CVE-2025-39994/	self
https://www.suse.com/security/cve/CVE-2025-39995/	self
https://www.suse.com/security/cve/CVE-2025-39996/	self
https://www.suse.com/security/cve/CVE-2025-39997/	self
https://www.suse.com/security/cve/CVE-2025-40000/	self
https://www.suse.com/security/cve/CVE-2025-40005/	self
https://www.suse.com/security/cve/CVE-2025-40010/	self
https://www.suse.com/security/cve/CVE-2025-40011/	self
https://www.suse.com/security/cve/CVE-2025-40013/	self
https://www.suse.com/security/cve/CVE-2025-40016/	self
https://www.suse.com/security/cve/CVE-2025-40018/	self
https://www.suse.com/security/cve/CVE-2025-40019/	self
https://www.suse.com/security/cve/CVE-2025-40020/	self
https://www.suse.com/security/cve/CVE-2025-40029/	self
https://www.suse.com/security/cve/CVE-2025-40032/	self
https://www.suse.com/security/cve/CVE-2025-40035/	self
https://www.suse.com/security/cve/CVE-2025-40036/	self
https://www.suse.com/security/cve/CVE-2025-40043/	self
https://www.suse.com/security/cve/CVE-2025-40044/	self
https://www.suse.com/security/cve/CVE-2025-40049/	self
https://www.suse.com/security/cve/CVE-2025-40051/	self
https://www.suse.com/security/cve/CVE-2025-40052/	self
https://www.suse.com/security/cve/CVE-2025-40056/	self
https://www.suse.com/security/cve/CVE-2025-40058/	self
https://www.suse.com/security/cve/CVE-2025-40060/	self
https://www.suse.com/security/cve/CVE-2025-40061/	self
https://www.suse.com/security/cve/CVE-2025-40062/	self
https://www.suse.com/security/cve/CVE-2025-40071/	self
https://www.suse.com/security/cve/CVE-2025-40078/	self
https://www.suse.com/security/cve/CVE-2025-40080/	self
https://www.suse.com/security/cve/CVE-2025-40082/	self
https://www.suse.com/security/cve/CVE-2025-40085/	self
https://www.suse.com/security/cve/CVE-2025-40087/	self
https://www.suse.com/security/cve/CVE-2025-40088/	self
https://www.suse.com/security/cve/CVE-2025-40096/	self
https://www.suse.com/security/cve/CVE-2025-40100/	self
https://www.suse.com/security/cve/CVE-2023-53538	external
https://bugzilla.suse.com/1251024	external
https://www.suse.com/security/cve/CVE-2023-53539	external
https://bugzilla.suse.com/1251060	external
https://www.suse.com/security/cve/CVE-2023-53540	external
https://bugzilla.suse.com/1251053	external
https://www.suse.com/security/cve/CVE-2023-53541	external
https://bugzilla.suse.com/1251043	external
https://www.suse.com/security/cve/CVE-2023-53543	external
https://bugzilla.suse.com/1251083	external
https://www.suse.com/security/cve/CVE-2023-53545	external
https://bugzilla.suse.com/1251084	external
https://www.suse.com/security/cve/CVE-2023-53546	external
https://bugzilla.suse.com/1251079	external
https://www.suse.com/security/cve/CVE-2023-53548	external
https://bugzilla.suse.com/1251066	external
https://www.suse.com/security/cve/CVE-2023-53550	external
https://bugzilla.suse.com/1251071	external
https://www.suse.com/security/cve/CVE-2023-53552	external
https://bugzilla.suse.com/1251065	external
https://www.suse.com/security/cve/CVE-2023-53553	external
https://bugzilla.suse.com/1251068	external
https://www.suse.com/security/cve/CVE-2023-53554	external
https://bugzilla.suse.com/1251057	external
https://www.suse.com/security/cve/CVE-2023-53555	external
https://bugzilla.suse.com/1251056	external
https://www.suse.com/security/cve/CVE-2023-53556	external
https://bugzilla.suse.com/1251059	external
https://www.suse.com/security/cve/CVE-2023-53557	external
https://bugzilla.suse.com/1251054	external
https://www.suse.com/security/cve/CVE-2023-53558	external
https://bugzilla.suse.com/1251081	external
https://www.suse.com/security/cve/CVE-2023-53559	external
https://bugzilla.suse.com/1251052	external
https://www.suse.com/security/cve/CVE-2023-53560	external
https://bugzilla.suse.com/1251045	external
https://www.suse.com/security/cve/CVE-2023-53563	external
https://bugzilla.suse.com/1251038	external
https://www.suse.com/security/cve/CVE-2023-53568	external
https://bugzilla.suse.com/1251035	external
https://www.suse.com/security/cve/CVE-2023-53570	external
https://bugzilla.suse.com/1251031	external
https://www.suse.com/security/cve/CVE-2023-53572	external
https://bugzilla.suse.com/1251027	external
https://www.suse.com/security/cve/CVE-2023-53574	external
https://bugzilla.suse.com/1251222	external
https://bugzilla.suse.com/1251984	external
https://www.suse.com/security/cve/CVE-2023-53575	external
https://bugzilla.suse.com/1251067	external
https://www.suse.com/security/cve/CVE-2023-53577	external
https://bugzilla.suse.com/1251028	external
https://www.suse.com/security/cve/CVE-2023-53579	external
https://bugzilla.suse.com/1251170	external
https://www.suse.com/security/cve/CVE-2023-53580	external
https://bugzilla.suse.com/1251105	external
https://www.suse.com/security/cve/CVE-2023-53581	external
https://bugzilla.suse.com/1251106	external
https://www.suse.com/security/cve/CVE-2023-53583	external
https://bugzilla.suse.com/1251108	external
https://www.suse.com/security/cve/CVE-2023-53585	external
https://bugzilla.suse.com/1251126	external
https://www.suse.com/security/cve/CVE-2023-53588	external
https://bugzilla.suse.com/1251206	external
https://www.suse.com/security/cve/CVE-2023-53593	external
https://bugzilla.suse.com/1251132	external
https://www.suse.com/security/cve/CVE-2023-53596	external
https://bugzilla.suse.com/1251161	external
https://www.suse.com/security/cve/CVE-2023-53597	external
https://bugzilla.suse.com/1251159	external
https://www.suse.com/security/cve/CVE-2023-53599	external
https://bugzilla.suse.com/1251150	external
https://www.suse.com/security/cve/CVE-2023-53600	external
https://bugzilla.suse.com/1251152	external
https://www.suse.com/security/cve/CVE-2023-53601	external
https://bugzilla.suse.com/1251153	external
https://www.suse.com/security/cve/CVE-2023-53602	external
https://bugzilla.suse.com/1251076	external
https://www.suse.com/security/cve/CVE-2023-53603	external
https://bugzilla.suse.com/1251180	external
https://www.suse.com/security/cve/CVE-2023-53611	external
https://bugzilla.suse.com/1251123	external
https://www.suse.com/security/cve/CVE-2023-53613	external
https://bugzilla.suse.com/1251119	external
https://www.suse.com/security/cve/CVE-2023-53615	external
https://bugzilla.suse.com/1251113	external
https://www.suse.com/security/cve/CVE-2023-53616	external
https://bugzilla.suse.com/1251215	external
https://www.suse.com/security/cve/CVE-2023-53617	external
https://bugzilla.suse.com/1251268	external
https://www.suse.com/security/cve/CVE-2023-53618	external
https://bugzilla.suse.com/1251748	external
https://www.suse.com/security/cve/CVE-2023-53619	external
https://bugzilla.suse.com/1251743	external
https://bugzilla.suse.com/1251745	external
https://www.suse.com/security/cve/CVE-2023-53621	external
https://bugzilla.suse.com/1251323	external
https://www.suse.com/security/cve/CVE-2023-53622	external
https://bugzilla.suse.com/1251777	external
https://www.suse.com/security/cve/CVE-2023-53631	external
https://bugzilla.suse.com/1251529	external
https://www.suse.com/security/cve/CVE-2023-53632	external
https://bugzilla.suse.com/1251269	external
https://www.suse.com/security/cve/CVE-2023-53633	external
https://bugzilla.suse.com/1251746	external
https://www.suse.com/security/cve/CVE-2023-53638	external
https://bugzilla.suse.com/1251328	external
https://www.suse.com/security/cve/CVE-2023-53645	external
https://bugzilla.suse.com/1251321	external
https://www.suse.com/security/cve/CVE-2023-53646	external
https://bugzilla.suse.com/1251742	external
https://www.suse.com/security/cve/CVE-2023-53647	external
https://bugzilla.suse.com/1251732	external
https://www.suse.com/security/cve/CVE-2023-53648	external
https://bugzilla.suse.com/1251750	external
https://www.suse.com/security/cve/CVE-2023-53649	external
https://bugzilla.suse.com/1251749	external
https://www.suse.com/security/cve/CVE-2023-53650	external
https://bugzilla.suse.com/1251283	external
https://www.suse.com/security/cve/CVE-2023-53652	external
https://bugzilla.suse.com/1251754	external
https://www.suse.com/security/cve/CVE-2023-53653	external
https://bugzilla.suse.com/1251755	external
https://www.suse.com/security/cve/CVE-2023-53654	external
https://bugzilla.suse.com/1251756	external
https://www.suse.com/security/cve/CVE-2023-53656	external
https://bugzilla.suse.com/1251758	external
https://www.suse.com/security/cve/CVE-2023-53657	external
https://bugzilla.suse.com/1251319	external
https://www.suse.com/security/cve/CVE-2023-53658	external
https://bugzilla.suse.com/1251759	external
https://www.suse.com/security/cve/CVE-2023-53659	external
https://bugzilla.suse.com/1251247	external
https://bugzilla.suse.com/1251248	external
https://www.suse.com/security/cve/CVE-2023-53660	external
https://bugzilla.suse.com/1251721	external
https://www.suse.com/security/cve/CVE-2023-53662	external
https://bugzilla.suse.com/1251282	external
https://www.suse.com/security/cve/CVE-2023-53663	external
https://bugzilla.suse.com/1251290	external
https://www.suse.com/security/cve/CVE-2023-53665	external
https://bugzilla.suse.com/1251270	external
https://www.suse.com/security/cve/CVE-2023-53666	external
https://bugzilla.suse.com/1251760	external
https://www.suse.com/security/cve/CVE-2023-53668	external
https://bugzilla.suse.com/1251286	external
https://www.suse.com/security/cve/CVE-2023-53670	external
https://bugzilla.suse.com/1251762	external
https://www.suse.com/security/cve/CVE-2023-53672	external
https://bugzilla.suse.com/1251780	external
https://www.suse.com/security/cve/CVE-2023-53673	external
https://bugzilla.suse.com/1251763	external
https://bugzilla.suse.com/1251983	external
https://www.suse.com/security/cve/CVE-2023-53674	external
https://bugzilla.suse.com/1251764	external
https://www.suse.com/security/cve/CVE-2023-53681	external
https://bugzilla.suse.com/1251769	external
https://www.suse.com/security/cve/CVE-2023-53686	external
https://bugzilla.suse.com/1251771	external
https://www.suse.com/security/cve/CVE-2023-53687	external
https://bugzilla.suse.com/1251772	external
https://www.suse.com/security/cve/CVE-2023-53693	external
https://bugzilla.suse.com/1252489	external
https://www.suse.com/security/cve/CVE-2023-53697	external
https://bugzilla.suse.com/1252534	external
https://www.suse.com/security/cve/CVE-2023-53698	external
https://bugzilla.suse.com/1252479	external
https://www.suse.com/security/cve/CVE-2023-53699	external
https://bugzilla.suse.com/1252550	external
https://www.suse.com/security/cve/CVE-2023-53703	external
https://bugzilla.suse.com/1252553	external
https://www.suse.com/security/cve/CVE-2023-53704	external
https://bugzilla.suse.com/1252490	external
https://www.suse.com/security/cve/CVE-2023-53707	external
https://bugzilla.suse.com/1252632	external
https://www.suse.com/security/cve/CVE-2023-53708	external
https://bugzilla.suse.com/1252537	external
https://www.suse.com/security/cve/CVE-2023-53711	external
https://bugzilla.suse.com/1252536	external
https://www.suse.com/security/cve/CVE-2023-53713	external
https://bugzilla.suse.com/1252559	external
https://bugzilla.suse.com/1253760	external
https://www.suse.com/security/cve/CVE-2023-53718	external
https://bugzilla.suse.com/1252564	external
https://www.suse.com/security/cve/CVE-2023-53721	external
https://bugzilla.suse.com/1252561	external
https://www.suse.com/security/cve/CVE-2023-53722	external
https://bugzilla.suse.com/1252499	external
https://bugzilla.suse.com/1252500	external
https://www.suse.com/security/cve/CVE-2023-53725	external
https://bugzilla.suse.com/1252492	external
https://www.suse.com/security/cve/CVE-2023-53726	external
https://bugzilla.suse.com/1252565	external
https://www.suse.com/security/cve/CVE-2023-53727	external
https://bugzilla.suse.com/1252566	external
https://www.suse.com/security/cve/CVE-2023-53728	external
https://bugzilla.suse.com/1252668	external
https://www.suse.com/security/cve/CVE-2023-53729	external
https://bugzilla.suse.com/1252496	external
https://www.suse.com/security/cve/CVE-2023-53730	external
https://bugzilla.suse.com/1252495	external
https://www.suse.com/security/cve/CVE-2023-53731	external
https://bugzilla.suse.com/1252481	external
https://www.suse.com/security/cve/CVE-2023-53733	external
https://bugzilla.suse.com/1252685	external
https://www.suse.com/security/cve/CVE-2025-38008	external
https://bugzilla.suse.com/1244939	external
https://www.suse.com/security/cve/CVE-2025-38539	external
https://bugzilla.suse.com/1248211	external
https://www.suse.com/security/cve/CVE-2025-38552	external
https://bugzilla.suse.com/1248230	external
https://www.suse.com/security/cve/CVE-2025-38653	external
https://bugzilla.suse.com/1248630	external
https://www.suse.com/security/cve/CVE-2025-38699	external
https://bugzilla.suse.com/1249224	external
https://www.suse.com/security/cve/CVE-2025-38700	external
https://bugzilla.suse.com/1249182	external
https://www.suse.com/security/cve/CVE-2025-38718	external
https://bugzilla.suse.com/1249161	external
https://www.suse.com/security/cve/CVE-2025-39673	external
https://bugzilla.suse.com/1249320	external
https://www.suse.com/security/cve/CVE-2025-39676	external
https://bugzilla.suse.com/1249302	external
https://www.suse.com/security/cve/CVE-2025-39683	external
https://bugzilla.suse.com/1249286	external
https://www.suse.com/security/cve/CVE-2025-39697	external
https://bugzilla.suse.com/1249319	external
https://www.suse.com/security/cve/CVE-2025-39702	external
https://bugzilla.suse.com/1249317	external
https://www.suse.com/security/cve/CVE-2025-39756	external
https://bugzilla.suse.com/1249512	external
https://www.suse.com/security/cve/CVE-2025-39794	external
https://bugzilla.suse.com/1249595	external
https://www.suse.com/security/cve/CVE-2025-39797	external
https://bugzilla.suse.com/1249608	external
https://www.suse.com/security/cve/CVE-2025-39812	external
https://bugzilla.suse.com/1250202	external
https://www.suse.com/security/cve/CVE-2025-39813	external
https://bugzilla.suse.com/1250032	external
https://www.suse.com/security/cve/CVE-2025-39828	external
https://bugzilla.suse.com/1250205	external
https://www.suse.com/security/cve/CVE-2025-39841	external
https://bugzilla.suse.com/1250274	external
https://www.suse.com/security/cve/CVE-2025-39851	external
https://bugzilla.suse.com/1250296	external
https://www.suse.com/security/cve/CVE-2025-39866	external
https://bugzilla.suse.com/1250455	external
https://www.suse.com/security/cve/CVE-2025-39876	external
https://bugzilla.suse.com/1250400	external
https://www.suse.com/security/cve/CVE-2025-39881	external
https://bugzilla.suse.com/1250379	external
https://www.suse.com/security/cve/CVE-2025-39895	external
https://bugzilla.suse.com/1250721	external
https://www.suse.com/security/cve/CVE-2025-39902	external
https://bugzilla.suse.com/1250702	external
https://www.suse.com/security/cve/CVE-2025-39911	external
https://bugzilla.suse.com/1250704	external
https://www.suse.com/security/cve/CVE-2025-39931	external
https://bugzilla.suse.com/1251100	external
https://www.suse.com/security/cve/CVE-2025-39934	external
https://bugzilla.suse.com/1251146	external
https://www.suse.com/security/cve/CVE-2025-39937	external
https://bugzilla.suse.com/1251143	external
https://www.suse.com/security/cve/CVE-2025-39938	external
https://bugzilla.suse.com/1251134	external
https://www.suse.com/security/cve/CVE-2025-39945	external
https://bugzilla.suse.com/1251230	external
https://www.suse.com/security/cve/CVE-2025-39946	external
https://bugzilla.suse.com/1251114	external
https://www.suse.com/security/cve/CVE-2025-39947	external
https://bugzilla.suse.com/1251232	external
https://www.suse.com/security/cve/CVE-2025-39948	external
https://bugzilla.suse.com/1251233	external
https://www.suse.com/security/cve/CVE-2025-39949	external
https://bugzilla.suse.com/1251177	external
https://www.suse.com/security/cve/CVE-2025-39952	external
https://bugzilla.suse.com/1251216	external
https://www.suse.com/security/cve/CVE-2025-39955	external
https://bugzilla.suse.com/1251804	external
https://www.suse.com/security/cve/CVE-2025-39957	external
https://bugzilla.suse.com/1251810	external
https://www.suse.com/security/cve/CVE-2025-39965	external
https://bugzilla.suse.com/1251967	external
https://www.suse.com/security/cve/CVE-2025-39967	external
https://bugzilla.suse.com/1252033	external
https://www.suse.com/security/cve/CVE-2025-39968	external
https://bugzilla.suse.com/1252047	external
https://www.suse.com/security/cve/CVE-2025-39969	external
https://bugzilla.suse.com/1252044	external
https://www.suse.com/security/cve/CVE-2025-39970	external
https://bugzilla.suse.com/1252051	external
https://www.suse.com/security/cve/CVE-2025-39971	external
https://bugzilla.suse.com/1252052	external
https://www.suse.com/security/cve/CVE-2025-39972	external
https://bugzilla.suse.com/1252039	external
https://www.suse.com/security/cve/CVE-2025-39973	external
https://bugzilla.suse.com/1247374	external
https://bugzilla.suse.com/1252035	external
https://bugzilla.suse.com/1252036	external
https://www.suse.com/security/cve/CVE-2025-39978	external
https://bugzilla.suse.com/1252069	external
https://bugzilla.suse.com/1252071	external
https://www.suse.com/security/cve/CVE-2025-39981	external
https://bugzilla.suse.com/1252060	external
https://bugzilla.suse.com/1252061	external
https://www.suse.com/security/cve/CVE-2025-39982	external
https://bugzilla.suse.com/1252083	external
https://www.suse.com/security/cve/CVE-2025-39985	external
https://bugzilla.suse.com/1252082	external
https://www.suse.com/security/cve/CVE-2025-39986	external
https://bugzilla.suse.com/1252078	external
https://www.suse.com/security/cve/CVE-2025-39987	external
https://bugzilla.suse.com/1252079	external
https://www.suse.com/security/cve/CVE-2025-39988	external
https://bugzilla.suse.com/1252074	external
https://www.suse.com/security/cve/CVE-2025-39991	external
https://bugzilla.suse.com/1252075	external
https://www.suse.com/security/cve/CVE-2025-39993	external
https://bugzilla.suse.com/1252070	external
https://www.suse.com/security/cve/CVE-2025-39994	external
https://bugzilla.suse.com/1252072	external
https://www.suse.com/security/cve/CVE-2025-39995	external
https://bugzilla.suse.com/1252064	external
https://www.suse.com/security/cve/CVE-2025-39996	external
https://bugzilla.suse.com/1252065	external
https://www.suse.com/security/cve/CVE-2025-39997	external
https://bugzilla.suse.com/1252056	external
https://www.suse.com/security/cve/CVE-2025-40000	external
https://bugzilla.suse.com/1252062	external
https://www.suse.com/security/cve/CVE-2025-40005	external
https://bugzilla.suse.com/1252349	external
https://www.suse.com/security/cve/CVE-2025-40010	external
https://bugzilla.suse.com/1252332	external
https://www.suse.com/security/cve/CVE-2025-40011	external
https://bugzilla.suse.com/1252336	external
https://www.suse.com/security/cve/CVE-2025-40013	external
https://bugzilla.suse.com/1252348	external
https://www.suse.com/security/cve/CVE-2025-40016	external
https://bugzilla.suse.com/1252346	external
https://www.suse.com/security/cve/CVE-2025-40018	external
https://bugzilla.suse.com/1247374	external
https://bugzilla.suse.com/1252688	external
https://bugzilla.suse.com/1252689	external
https://bugzilla.suse.com/1253291	external
https://www.suse.com/security/cve/CVE-2025-40019	external
https://bugzilla.suse.com/1252678	external
https://bugzilla.suse.com/1252719	external
https://www.suse.com/security/cve/CVE-2025-40020	external
https://bugzilla.suse.com/1252679	external
https://www.suse.com/security/cve/CVE-2025-40029	external
https://bugzilla.suse.com/1252772	external
https://www.suse.com/security/cve/CVE-2025-40032	external
https://bugzilla.suse.com/1252841	external
https://www.suse.com/security/cve/CVE-2025-40035	external
https://bugzilla.suse.com/1252866	external
https://www.suse.com/security/cve/CVE-2025-40036	external
https://bugzilla.suse.com/1252865	external
https://www.suse.com/security/cve/CVE-2025-40043	external
https://bugzilla.suse.com/1252787	external
https://www.suse.com/security/cve/CVE-2025-40044	external
https://bugzilla.suse.com/1252785	external
https://www.suse.com/security/cve/CVE-2025-40049	external
https://bugzilla.suse.com/1252822	external
https://www.suse.com/security/cve/CVE-2025-40051	external
https://bugzilla.suse.com/1252858	external
https://www.suse.com/security/cve/CVE-2025-40052	external
https://bugzilla.suse.com/1252851	external
https://www.suse.com/security/cve/CVE-2025-40056	external
https://bugzilla.suse.com/1252826	external
https://www.suse.com/security/cve/CVE-2025-40058	external
https://bugzilla.suse.com/1252854	external
https://www.suse.com/security/cve/CVE-2025-40060	external
https://bugzilla.suse.com/1252848	external
https://www.suse.com/security/cve/CVE-2025-40061	external
https://bugzilla.suse.com/1252849	external
https://www.suse.com/security/cve/CVE-2025-40062	external
https://bugzilla.suse.com/1252850	external
https://www.suse.com/security/cve/CVE-2025-40071	external
https://bugzilla.suse.com/1252797	external
https://www.suse.com/security/cve/CVE-2025-40078	external
https://bugzilla.suse.com/1252789	external
https://www.suse.com/security/cve/CVE-2025-40080	external
https://bugzilla.suse.com/1252774	external
https://www.suse.com/security/cve/CVE-2025-40082	external
https://bugzilla.suse.com/1252775	external
https://www.suse.com/security/cve/CVE-2025-40085	external
https://bugzilla.suse.com/1252873	external
https://www.suse.com/security/cve/CVE-2025-40087	external
https://bugzilla.suse.com/1252909	external
https://www.suse.com/security/cve/CVE-2025-40088	external
https://bugzilla.suse.com/1252904	external
https://www.suse.com/security/cve/CVE-2025-40096	external
https://bugzilla.suse.com/1252902	external
https://www.suse.com/security/cve/CVE-2025-40100	external
https://bugzilla.suse.com/1252918	external

JSON

To clipboard

Loading 2.0 MB of JSON…

CVE-2023-53538 (GCVE-0-2023-53538)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-05-11 19:46

Title

btrfs: insert tree mod log move in push_node_left

Summary

In the Linux kernel, the following vulnerability has been resolved: btrfs: insert tree mod log move in push_node_left There is a fairly unlikely race condition in tree mod log rewind that can result in a kernel panic which has the following trace: [530.569] BTRFS critical (device sda3): unable to find logical 0 length 4096 [530.585] BTRFS critical (device sda3): unable to find logical 0 length 4096 [530.602] BUG: kernel NULL pointer dereference, address: 0000000000000002 [530.618] #PF: supervisor read access in kernel mode [530.629] #PF: error_code(0x0000) - not-present page [530.641] PGD 0 P4D 0 [530.647] Oops: 0000 [#1] SMP [530.654] CPU: 30 PID: 398973 Comm: below Kdump: loaded Tainted: G S O K 5.12.0-0_fbk13_clang_7455_gb24de3bdb045 #1 [530.680] Hardware name: Quanta Mono Lake-M.2 SATA 1HY9U9Z001G/Mono Lake-M.2 SATA, BIOS F20_3A15 08/16/2017 [530.703] RIP: 0010:__btrfs_map_block+0xaa/0xd00 [530.755] RSP: 0018:ffffc9002c2f7600 EFLAGS: 00010246 [530.767] RAX: ffffffffffffffea RBX: ffff888292e41000 RCX: f2702d8b8be15100 [530.784] RDX: ffff88885fda6fb8 RSI: ffff88885fd973c8 RDI: ffff88885fd973c8 [530.800] RBP: ffff888292e410d0 R08: ffffffff82fd7fd0 R09: 00000000fffeffff [530.816] R10: ffffffff82e57fd0 R11: ffffffff82e57d70 R12: 0000000000000000 [530.832] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc9002c2f76f0 [530.848] FS: 00007f38d64af000(0000) GS:ffff88885fd80000(0000) knlGS:0000000000000000 [530.866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [530.880] CR2: 0000000000000002 CR3: 00000002b6770004 CR4: 00000000003706e0 [530.896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [530.912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [530.928] Call Trace: [530.934] ? btrfs_printk+0x13b/0x18c [530.943] ? btrfs_bio_counter_inc_blocked+0x3d/0x130 [530.955] btrfs_map_bio+0x75/0x330 [530.963] ? kmem_cache_alloc+0x12a/0x2d0 [530.973] ? btrfs_submit_metadata_bio+0x63/0x100 [530.984] btrfs_submit_metadata_bio+0xa4/0x100 [530.995] submit_extent_page+0x30f/0x360 [531.004] read_extent_buffer_pages+0x49e/0x6d0 [531.015] ? submit_extent_page+0x360/0x360 [531.025] btree_read_extent_buffer_pages+0x5f/0x150 [531.037] read_tree_block+0x37/0x60 [531.046] read_block_for_search+0x18b/0x410 [531.056] btrfs_search_old_slot+0x198/0x2f0 [531.066] resolve_indirect_ref+0xfe/0x6f0 [531.076] ? ulist_alloc+0x31/0x60 [531.084] ? kmem_cache_alloc_trace+0x12e/0x2b0 [531.095] find_parent_nodes+0x720/0x1830 [531.105] ? ulist_alloc+0x10/0x60 [531.113] iterate_extent_inodes+0xea/0x370 [531.123] ? btrfs_previous_extent_item+0x8f/0x110 [531.134] ? btrfs_search_path_in_tree+0x240/0x240 [531.146] iterate_inodes_from_logical+0x98/0xd0 [531.157] ? btrfs_search_path_in_tree+0x240/0x240 [531.168] btrfs_ioctl_logical_to_ino+0xd9/0x180 [531.179] btrfs_ioctl+0xe2/0x2eb0 This occurs when logical inode resolution takes a tree mod log sequence number, and then while backref walking hits a rewind on a busy node which has the following sequence of tree mod log operations (numbers filled in from a specific example, but they are somewhat arbitrary) REMOVE_WHILE_FREEING slot 532 REMOVE_WHILE_FREEING slot 531 REMOVE_WHILE_FREEING slot 530 ... REMOVE_WHILE_FREEING slot 0 REMOVE slot 455 REMOVE slot 454 REMOVE slot 453 ... REMOVE slot 0 ADD slot 455 ADD slot 454 ADD slot 453 ... ADD slot 0 MOVE src slot 0 -> dst slot 456 nritems 533 REMOVE slot 455 REMOVE slot 454 REMOVE slot 453 ... REMOVE slot 0 When this sequence gets applied via btrfs_tree_mod_log_rewind, it allocates a fresh rewind eb, and first inserts the correct key info for the 533 elements, then overwrites the first 456 of them, then decrements the count by 456 via the add ops, then rewinds the move by doing a memmove from 456:988->0:532. We have never written anything past 532, ---truncated---

Severity

No CVSS data available.

Assigner

Linux mitre root

References

2 references

URL	Tags
https://git.kernel.org/stable/c/11f14402fe3437852…
https://git.kernel.org/stable/c/5cead5422a0e3d13b…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 57911b8ba814fae01306376a0d02bc7cdc88dc94 , < 11f14402fe3437852cb44945b3b9f1bdb4032956 (git) Affected: 57911b8ba814fae01306376a0d02bc7cdc88dc94 , < 5cead5422a0e3d13b0bcee986c0f5c4ebb94100b (git)
Linux	Linux	Affected: 3.7 Unaffected: 0 , < 3.7 (semver) Unaffected: 6.4.4 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/ctree.c",
            "fs/btrfs/tree-mod-log.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "11f14402fe3437852cb44945b3b9f1bdb4032956",
              "status": "affected",
              "version": "57911b8ba814fae01306376a0d02bc7cdc88dc94",
              "versionType": "git"
            },
            {
              "lessThan": "5cead5422a0e3d13b0bcee986c0f5c4ebb94100b",
              "status": "affected",
              "version": "57911b8ba814fae01306376a0d02bc7cdc88dc94",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/btrfs/ctree.c",
            "fs/btrfs/tree-mod-log.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.7"
            },
            {
              "lessThan": "3.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.4",
                  "versionStartIncluding": "3.7",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "3.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: insert tree mod log move in push_node_left\n\nThere is a fairly unlikely race condition in tree mod log rewind that\ncan result in a kernel panic which has the following trace:\n\n  [530.569] BTRFS critical (device sda3): unable to find logical 0 length 4096\n  [530.585] BTRFS critical (device sda3): unable to find logical 0 length 4096\n  [530.602] BUG: kernel NULL pointer dereference, address: 0000000000000002\n  [530.618] #PF: supervisor read access in kernel mode\n  [530.629] #PF: error_code(0x0000) - not-present page\n  [530.641] PGD 0 P4D 0\n  [530.647] Oops: 0000 [#1] SMP\n  [530.654] CPU: 30 PID: 398973 Comm: below Kdump: loaded Tainted: G S         O  K   5.12.0-0_fbk13_clang_7455_gb24de3bdb045 #1\n  [530.680] Hardware name: Quanta Mono Lake-M.2 SATA 1HY9U9Z001G/Mono Lake-M.2 SATA, BIOS F20_3A15 08/16/2017\n  [530.703] RIP: 0010:__btrfs_map_block+0xaa/0xd00\n  [530.755] RSP: 0018:ffffc9002c2f7600 EFLAGS: 00010246\n  [530.767] RAX: ffffffffffffffea RBX: ffff888292e41000 RCX: f2702d8b8be15100\n  [530.784] RDX: ffff88885fda6fb8 RSI: ffff88885fd973c8 RDI: ffff88885fd973c8\n  [530.800] RBP: ffff888292e410d0 R08: ffffffff82fd7fd0 R09: 00000000fffeffff\n  [530.816] R10: ffffffff82e57fd0 R11: ffffffff82e57d70 R12: 0000000000000000\n  [530.832] R13: 0000000000001000 R14: 0000000000001000 R15: ffffc9002c2f76f0\n  [530.848] FS:  00007f38d64af000(0000) GS:ffff88885fd80000(0000) knlGS:0000000000000000\n  [530.866] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  [530.880] CR2: 0000000000000002 CR3: 00000002b6770004 CR4: 00000000003706e0\n  [530.896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n  [530.912] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n  [530.928] Call Trace:\n  [530.934]  ? btrfs_printk+0x13b/0x18c\n  [530.943]  ? btrfs_bio_counter_inc_blocked+0x3d/0x130\n  [530.955]  btrfs_map_bio+0x75/0x330\n  [530.963]  ? kmem_cache_alloc+0x12a/0x2d0\n  [530.973]  ? btrfs_submit_metadata_bio+0x63/0x100\n  [530.984]  btrfs_submit_metadata_bio+0xa4/0x100\n  [530.995]  submit_extent_page+0x30f/0x360\n  [531.004]  read_extent_buffer_pages+0x49e/0x6d0\n  [531.015]  ? submit_extent_page+0x360/0x360\n  [531.025]  btree_read_extent_buffer_pages+0x5f/0x150\n  [531.037]  read_tree_block+0x37/0x60\n  [531.046]  read_block_for_search+0x18b/0x410\n  [531.056]  btrfs_search_old_slot+0x198/0x2f0\n  [531.066]  resolve_indirect_ref+0xfe/0x6f0\n  [531.076]  ? ulist_alloc+0x31/0x60\n  [531.084]  ? kmem_cache_alloc_trace+0x12e/0x2b0\n  [531.095]  find_parent_nodes+0x720/0x1830\n  [531.105]  ? ulist_alloc+0x10/0x60\n  [531.113]  iterate_extent_inodes+0xea/0x370\n  [531.123]  ? btrfs_previous_extent_item+0x8f/0x110\n  [531.134]  ? btrfs_search_path_in_tree+0x240/0x240\n  [531.146]  iterate_inodes_from_logical+0x98/0xd0\n  [531.157]  ? btrfs_search_path_in_tree+0x240/0x240\n  [531.168]  btrfs_ioctl_logical_to_ino+0xd9/0x180\n  [531.179]  btrfs_ioctl+0xe2/0x2eb0\n\nThis occurs when logical inode resolution takes a tree mod log sequence\nnumber, and then while backref walking hits a rewind on a busy node\nwhich has the following sequence of tree mod log operations (numbers\nfilled in from a specific example, but they are somewhat arbitrary)\n\n  REMOVE_WHILE_FREEING slot 532\n  REMOVE_WHILE_FREEING slot 531\n  REMOVE_WHILE_FREEING slot 530\n  ...\n  REMOVE_WHILE_FREEING slot 0\n  REMOVE slot 455\n  REMOVE slot 454\n  REMOVE slot 453\n  ...\n  REMOVE slot 0\n  ADD slot 455\n  ADD slot 454\n  ADD slot 453\n  ...\n  ADD slot 0\n  MOVE src slot 0 -\u003e dst slot 456 nritems 533\n  REMOVE slot 455\n  REMOVE slot 454\n  REMOVE slot 453\n  ...\n  REMOVE slot 0\n\nWhen this sequence gets applied via btrfs_tree_mod_log_rewind, it\nallocates a fresh rewind eb, and first inserts the correct key info for\nthe 533 elements, then overwrites the first 456 of them, then decrements\nthe count by 456 via the add ops, then rewinds the move by doing a\nmemmove from 456:988-\u003e0:532. We have never written anything past 532,\n---truncated---"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:46:54.654Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/11f14402fe3437852cb44945b3b9f1bdb4032956"
        },
        {
          "url": "https://git.kernel.org/stable/c/5cead5422a0e3d13b0bcee986c0f5c4ebb94100b"
        }
      ],
      "title": "btrfs: insert tree mod log move in push_node_left",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53538",
    "datePublished": "2025-10-04T15:16:48.694Z",
    "dateReserved": "2025-10-04T15:14:15.919Z",
    "dateUpdated": "2026-05-11T19:46:54.654Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53539 (GCVE-0-2023-53539)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-08-05 09:14

Title

RDMA/rxe: Fix incomplete state save in rxe_requester

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix incomplete state save in rxe_requester If a send packet is dropped by the IP layer in rxe_requester() the call to rxe_xmit_packet() can fail with err == -EAGAIN. To recover, the state of the wqe is restored to the state before the packet was sent so it can be resent. However, the routines that save and restore the state miss a significnt part of the variable state in the wqe, the dma struct which is used to process through the sge table. And, the state is not saved before the packet is built which modifies the dma struct. Under heavy stress testing with many QPs on a fast node sending large messages to a slow node dropped packets are observed and the resent packets are corrupted because the dma struct was not restored. This patch fixes this behavior and allows the test cases to succeed.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-10 20:40 UTC

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/70518f3aaf5a059b6…
https://git.kernel.org/stable/c/2f2a6422287fe29f9…
https://git.kernel.org/stable/c/255c0e60e1d16874f…
https://git.kernel.org/stable/c/5d122db2ff80cd2ae…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 3050b99850247695cb07a5c15265afcc08bcf400 , < 70518f3aaf5a059b691867d7d2d46b999319656a (git) Affected: 3050b99850247695cb07a5c15265afcc08bcf400 , < 2f2a6422287fe29f9343247d77b645100ece0652 (git) Affected: 3050b99850247695cb07a5c15265afcc08bcf400 , < 255c0e60e1d16874fc151358d94bc8df661600dd (git) Affected: 3050b99850247695cb07a5c15265afcc08bcf400 , < 5d122db2ff80cd2aed4dcd630befb56b51ddf947 (git)
Linux	Linux	Affected: 4.8 Unaffected: 0 , < 4.8 (semver) Unaffected: 6.1.53 , ≤ 6.1.* (semver) Unaffected: 6.4.16 , ≤ 6.4.* (semver) Unaffected: 6.5.3 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-53539",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-10T20:40:24.748179Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-16T15:46:10.080Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/sw/rxe/rxe_req.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "70518f3aaf5a059b691867d7d2d46b999319656a",
              "status": "affected",
              "version": "3050b99850247695cb07a5c15265afcc08bcf400",
              "versionType": "git"
            },
            {
              "lessThan": "2f2a6422287fe29f9343247d77b645100ece0652",
              "status": "affected",
              "version": "3050b99850247695cb07a5c15265afcc08bcf400",
              "versionType": "git"
            },
            {
              "lessThan": "255c0e60e1d16874fc151358d94bc8df661600dd",
              "status": "affected",
              "version": "3050b99850247695cb07a5c15265afcc08bcf400",
              "versionType": "git"
            },
            {
              "lessThan": "5d122db2ff80cd2aed4dcd630befb56b51ddf947",
              "status": "affected",
              "version": "3050b99850247695cb07a5c15265afcc08bcf400",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/sw/rxe/rxe_req.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.53",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.16",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.3",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix incomplete state save in rxe_requester\n\nIf a send packet is dropped by the IP layer in rxe_requester()\nthe call to rxe_xmit_packet() can fail with err == -EAGAIN.\nTo recover, the state of the wqe is restored to the state before\nthe packet was sent so it can be resent. However, the routines\nthat save and restore the state miss a significnt part of the\nvariable state in the wqe, the dma struct which is used to process\nthrough the sge table. And, the state is not saved before the packet\nis built which modifies the dma struct.\n\nUnder heavy stress testing with many QPs on a fast node sending\nlarge messages to a slow node dropped packets are observed and\nthe resent packets are corrupted because the dma struct was not\nrestored. This patch fixes this behavior and allows the test cases\nto succeed."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - rxe_requester() is the local transmit path, entered only by work requests posted from the local node via /dev/infiniband/uverbs* (ibv_post_send) or by in-kernel ULPs over Soft-RoCE; a remote peer cannot post WRs into this queue. The triggering error also originates in the local IP/qdisc layer.\nAC:L - The attacker fully controls the condition that produces the -EAGAIN drop \u2014 the commit itself describes it arising from many QPs sending large messages, and an unprivileged user can additionally saturate the outbound qdisc of the same netdev to force NET_XMIT_DROP on demand. The rollback path is then hit deterministically and can be retried indefinitely.\nPR:L - Only an unprivileged local account is needed: rdma-core udev rules expose /dev/infiniband/uverbs* mode 0666, so any user (including inside a container) can create QPs and post sends once an rxe link exists. No capability check gates the requester path.\nUI:N - The attacker\u0027s own posted sends plus self-generated network congestion drive the entire sequence; no action by any other user or administrator is required.\nS:U - The corrupted state and its effects stay within the kernel\u0027s RDMA subsystem and the QPs of the same security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - The desynchronized dma cursor makes the requester transmit a different region of registered memory than the PSN/opcode declares, so registered buffer contents are delivered to memory offsets the application never intended, and short/zero-payload packets (e.g. ATOMIC_WRITE with resid already 0) drive the receiving responder to consume data past the declared payload. Treating the state corruption as leverageable for disclosure, this is scored High.\nI:H - This is the core impact \u2014 resent packets carry the wrong SGE data, so a multi-packet SEND or RDMA WRITE silently writes truncated/shifted content into the peer\u0027s registered memory while the local completion still reports IB_WC_SUCCESS, giving undetected corruption of application and (for NFS/RDMA, iSER, NVMe-oF, SMB Direct over rxe) on-disk data.\nA:H - When the dropped packet was the LAST of a message, the retry emits a zero-length END packet that the responder rejects with RESPST_ERR_LENGTH (rxe_resp.c:378-382), and early-terminated WRITEs trip the pktlen check in check_rkey(); either produces NAK_INVALID_REQUEST, driving both RC QPs into the error state and destroying the connection along with all in-flight and queued work."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:42.566Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/70518f3aaf5a059b691867d7d2d46b999319656a"
        },
        {
          "url": "https://git.kernel.org/stable/c/2f2a6422287fe29f9343247d77b645100ece0652"
        },
        {
          "url": "https://git.kernel.org/stable/c/255c0e60e1d16874fc151358d94bc8df661600dd"
        },
        {
          "url": "https://git.kernel.org/stable/c/5d122db2ff80cd2aed4dcd630befb56b51ddf947"
        }
      ],
      "title": "RDMA/rxe: Fix incomplete state save in rxe_requester",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53539",
    "datePublished": "2025-10-04T15:16:49.379Z",
    "dateReserved": "2025-10-04T15:14:15.919Z",
    "dateUpdated": "2026-08-05T09:14:42.566Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53540 (GCVE-0-2023-53540)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-08-05 09:14

Title

wifi: cfg80211: reject auth/assoc to AP with our address

Summary

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Assigner

Linux mitre root

References

3 references

URL	Tags
https://git.kernel.org/stable/c/676a423410131d111…
https://git.kernel.org/stable/c/07added2c6cd63de0…
https://git.kernel.org/stable/c/5d4e04bf3a0f098bd…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 19957bb399e2722719c0e20c9ae91cf8b6aaff04 , < 676a423410131d111a264d29aecbe6aadd57fb22 (git) Affected: 19957bb399e2722719c0e20c9ae91cf8b6aaff04 , < 07added2c6cd63de047bc786b39436322abb67c0 (git) Affected: 19957bb399e2722719c0e20c9ae91cf8b6aaff04 , < 5d4e04bf3a0f098bd9033de3a5291810fa14c7a6 (git)
Linux	Linux	Affected: 2.6.32 Unaffected: 0 , < 2.6.32 (semver) Unaffected: 6.1.55 , ≤ 6.1.* (semver) Unaffected: 6.5.5 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/wireless/mlme.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "676a423410131d111a264d29aecbe6aadd57fb22",
              "status": "affected",
              "version": "19957bb399e2722719c0e20c9ae91cf8b6aaff04",
              "versionType": "git"
            },
            {
              "lessThan": "07added2c6cd63de047bc786b39436322abb67c0",
              "status": "affected",
              "version": "19957bb399e2722719c0e20c9ae91cf8b6aaff04",
              "versionType": "git"
            },
            {
              "lessThan": "5d4e04bf3a0f098bd9033de3a5291810fa14c7a6",
              "status": "affected",
              "version": "19957bb399e2722719c0e20c9ae91cf8b6aaff04",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/wireless/mlme.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.32"
            },
            {
              "lessThan": "2.6.32",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.55",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.5",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "2.6.32",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: reject auth/assoc to AP with our address\n\nIf the AP uses our own address as its MLD address or BSSID, then\nclearly something\u0027s wrong. Reject such connections so we don\u0027t\ntry and fail later."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The BSS parameters that trigger the bug originate from attacker-transmitted beacon/probe-response frames, which cfg80211 accepts into the scan cache without rejecting a BSSID equal to a local interface address; an attacker in WiFi range can therefore induce the victim\u0027s SME to auth/assoc to a self-addressed BSS. Per WiFi frame-injection guidance this is Adjacent.\nAC:L - The attacker fully controls the beacon\u0027s BSSID/MLD address and SSID, and the victim STA\u0027s MAC address is passively observable from its probe requests; the victim\u0027s connection attempt is routine auto-join behavior that the attacker can force by deauthing it from its real AP.\nPR:N - A rogue AP needs no credentials or prior association with the victim, and the failure occurs in the pre-authentication auth/assoc path before any key exchange.\nUI:N - Automatic reconnection to a known/matching SSID by wpa_supplicant or the kernel SME requires no human action, and the attacker can trigger it on demand with a deauth.\nS:U - The WARN_ON and the corrupted MLME state are entirely within the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:N - No out-of-bounds read, uninitialized memory disclosure, or other read primitive is created; the attacker gains no access to kernel or user data.\nI:L - The attacker\u0027s rogue BSS causes mac80211 to tear down the legitimate association and leaves inconsistent state behind (`vif.cfg.ap_addr` set to the interface\u0027s own address, and in the MLO case a link_sta bearing our own address inserted into `local-\u003elink_sta_hash`), a bounded modification of kernel connection state rather than arbitrary write.\nA:H - The path reaches `WARN_ON()` in `sta_info_insert_check()`, which is a kernel panic on the many deployments running `panic_on_warn=1`, and can be triggered repeatedly to persistently deny WiFi connectivity."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:43.616Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/676a423410131d111a264d29aecbe6aadd57fb22"
        },
        {
          "url": "https://git.kernel.org/stable/c/07added2c6cd63de047bc786b39436322abb67c0"
        },
        {
          "url": "https://git.kernel.org/stable/c/5d4e04bf3a0f098bd9033de3a5291810fa14c7a6"
        }
      ],
      "title": "wifi: cfg80211: reject auth/assoc to AP with our address",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53540",
    "datePublished": "2025-10-04T15:16:50.079Z",
    "dateReserved": "2025-10-04T15:14:15.919Z",
    "dateUpdated": "2026-08-05T09:14:43.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53541 (GCVE-0-2023-53541)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-05-11 19:46

Title

mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write

Summary

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write When the oob buffer length is not in multiple of words, the oob write function does out-of-bounds read on the oob source buffer at the last iteration. Fix that by always checking length limit on the oob buffer read and fill with 0xff when reaching the end of the buffer to the oob registers.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/2bc3d6ac704ea7263…
https://git.kernel.org/stable/c/14b1d00520b4d6a48…
https://git.kernel.org/stable/c/aae45746f4aee9818…
https://git.kernel.org/stable/c/d00b031266514a939…
https://git.kernel.org/stable/c/2353b7bb61e45e7cf…
https://git.kernel.org/stable/c/45fe4ad7f439799ee…
https://git.kernel.org/stable/c/648d1150a688698e3…
https://git.kernel.org/stable/c/5d53244186c9ac58c…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 , < 2bc3d6ac704ea7263175ea3da663fdbbb7f3dd8b (git) Affected: 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 , < 14b1d00520b4d6a4818364334ce472b79cfc8976 (git) Affected: 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 , < aae45746f4aee9818296e0500e0703e9d8caa5b8 (git) Affected: 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 , < d00b031266514a9395124704630b056a5185ec17 (git) Affected: 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 , < 2353b7bb61e45e7cfd21505d0c6747ac8c9496a1 (git) Affected: 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 , < 45fe4ad7f439799ee1b7b5f80bf82e8b34a98d25 (git) Affected: 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 , < 648d1150a688698e37f7aaf302860180901cb30e (git) Affected: 27c5b17cd1b10564fa36f8f51e4b4b41436ecc32 , < 5d53244186c9ac58cb88d76a0958ca55b83a15cd (git)
Linux	Linux	Affected: 4.2 Unaffected: 0 , < 4.2 (semver) Unaffected: 4.14.326 , ≤ 4.14.* (semver) Unaffected: 4.19.295 , ≤ 4.19.* (semver) Unaffected: 5.4.257 , ≤ 5.4.* (semver) Unaffected: 5.10.195 , ≤ 5.10.* (semver) Unaffected: 5.15.132 , ≤ 5.15.* (semver) Unaffected: 6.1.54 , ≤ 6.1.* (semver) Unaffected: 6.5.4 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/mtd/nand/raw/brcmnand/brcmnand.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "2bc3d6ac704ea7263175ea3da663fdbbb7f3dd8b",
              "status": "affected",
              "version": "27c5b17cd1b10564fa36f8f51e4b4b41436ecc32",
              "versionType": "git"
            },
            {
              "lessThan": "14b1d00520b4d6a4818364334ce472b79cfc8976",
              "status": "affected",
              "version": "27c5b17cd1b10564fa36f8f51e4b4b41436ecc32",
              "versionType": "git"
            },
            {
              "lessThan": "aae45746f4aee9818296e0500e0703e9d8caa5b8",
              "status": "affected",
              "version": "27c5b17cd1b10564fa36f8f51e4b4b41436ecc32",
              "versionType": "git"
            },
            {
              "lessThan": "d00b031266514a9395124704630b056a5185ec17",
              "status": "affected",
              "version": "27c5b17cd1b10564fa36f8f51e4b4b41436ecc32",
              "versionType": "git"
            },
            {
              "lessThan": "2353b7bb61e45e7cfd21505d0c6747ac8c9496a1",
              "status": "affected",
              "version": "27c5b17cd1b10564fa36f8f51e4b4b41436ecc32",
              "versionType": "git"
            },
            {
              "lessThan": "45fe4ad7f439799ee1b7b5f80bf82e8b34a98d25",
              "status": "affected",
              "version": "27c5b17cd1b10564fa36f8f51e4b4b41436ecc32",
              "versionType": "git"
            },
            {
              "lessThan": "648d1150a688698e37f7aaf302860180901cb30e",
              "status": "affected",
              "version": "27c5b17cd1b10564fa36f8f51e4b4b41436ecc32",
              "versionType": "git"
            },
            {
              "lessThan": "5d53244186c9ac58cb88d76a0958ca55b83a15cd",
              "status": "affected",
              "version": "27c5b17cd1b10564fa36f8f51e4b4b41436ecc32",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/mtd/nand/raw/brcmnand/brcmnand.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "lessThan": "4.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.326",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.295",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.257",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.195",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.132",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.54",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.326",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.295",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.257",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.195",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.132",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.54",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.4",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write\n\nWhen the oob buffer length is not in multiple of words, the oob write\nfunction does out-of-bounds read on the oob source buffer at the last\niteration. Fix that by always checking length limit on the oob buffer\nread and fill with 0xff when reaching the end of the buffer to the oob\nregisters."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:46:58.053Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/2bc3d6ac704ea7263175ea3da663fdbbb7f3dd8b"
        },
        {
          "url": "https://git.kernel.org/stable/c/14b1d00520b4d6a4818364334ce472b79cfc8976"
        },
        {
          "url": "https://git.kernel.org/stable/c/aae45746f4aee9818296e0500e0703e9d8caa5b8"
        },
        {
          "url": "https://git.kernel.org/stable/c/d00b031266514a9395124704630b056a5185ec17"
        },
        {
          "url": "https://git.kernel.org/stable/c/2353b7bb61e45e7cfd21505d0c6747ac8c9496a1"
        },
        {
          "url": "https://git.kernel.org/stable/c/45fe4ad7f439799ee1b7b5f80bf82e8b34a98d25"
        },
        {
          "url": "https://git.kernel.org/stable/c/648d1150a688698e37f7aaf302860180901cb30e"
        },
        {
          "url": "https://git.kernel.org/stable/c/5d53244186c9ac58cb88d76a0958ca55b83a15cd"
        }
      ],
      "title": "mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53541",
    "datePublished": "2025-10-04T15:16:50.765Z",
    "dateReserved": "2025-10-04T15:14:15.920Z",
    "dateUpdated": "2026-05-11T19:46:58.053Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53543 (GCVE-0-2023-53543)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-06-01 16:04

Title

vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check

Summary

In the Linux kernel, the following vulnerability has been resolved: vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check The vdpa_nl_policy structure is used to validate the nlattr when parsing the incoming nlmsg. It will ensure the attribute being described produces a valid nlattr pointer in info->attrs before entering into each handler in vdpa_nl_ops. That is to say, the missing part in vdpa_nl_policy may lead to illegal nlattr after parsing, which could lead to OOB read just like CVE-2023-3773. This patch adds the missing nla_policy for vdpa max vqp attr to avoid such bugs.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/baed19c108ac82874…
https://git.kernel.org/stable/c/ff71709445ac033e6…
https://git.kernel.org/stable/c/ea65e8b5e6b1a34de…
https://git.kernel.org/stable/c/5d6ba607d6cb5c58a…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 447092100c7e71aa20469a270fcee441d807ed58 , < baed19c108ac8287425b93a44985bbe9a0b1af8d (git) Affected: ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a , < ff71709445ac033e6e250d971683110e4781c068 (git) Affected: ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a , < ea65e8b5e6b1a34deda7564f09c90e9e80db436a (git) Affected: ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a , < 5d6ba607d6cb5c58a4ddf33381e18c83dbb4098f (git) Affected: 5.15.198 , < 5.15.209 (semver)
Linux	Linux	Affected: 5.16 Unaffected: 0 , < 5.16 (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.47 , ≤ 6.1.* (semver) Unaffected: 6.4.12 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/vdpa/vdpa.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "baed19c108ac8287425b93a44985bbe9a0b1af8d",
              "status": "affected",
              "version": "447092100c7e71aa20469a270fcee441d807ed58",
              "versionType": "git"
            },
            {
              "lessThan": "ff71709445ac033e6e250d971683110e4781c068",
              "status": "affected",
              "version": "ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a",
              "versionType": "git"
            },
            {
              "lessThan": "ea65e8b5e6b1a34deda7564f09c90e9e80db436a",
              "status": "affected",
              "version": "ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a",
              "versionType": "git"
            },
            {
              "lessThan": "5d6ba607d6cb5c58a4ddf33381e18c83dbb4098f",
              "status": "affected",
              "version": "ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a",
              "versionType": "git"
            },
            {
              "lessThan": "5.15.209",
              "status": "affected",
              "version": "5.15.198",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/vdpa/vdpa.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.16"
            },
            {
              "lessThan": "5.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.47",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "5.15.198",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.47",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.12",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check\n\nThe vdpa_nl_policy structure is used to validate the nlattr when parsing\nthe incoming nlmsg. It will ensure the attribute being described produces\na valid nlattr pointer in info-\u003eattrs before entering into each handler\nin vdpa_nl_ops.\n\nThat is to say, the missing part in vdpa_nl_policy may lead to illegal\nnlattr after parsing, which could lead to OOB read just like CVE-2023-3773.\n\nThis patch adds the missing nla_policy for vdpa max vqp attr to avoid\nsuch bugs."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-01T16:04:13.122Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/baed19c108ac8287425b93a44985bbe9a0b1af8d"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff71709445ac033e6e250d971683110e4781c068"
        },
        {
          "url": "https://git.kernel.org/stable/c/ea65e8b5e6b1a34deda7564f09c90e9e80db436a"
        },
        {
          "url": "https://git.kernel.org/stable/c/5d6ba607d6cb5c58a4ddf33381e18c83dbb4098f"
        }
      ],
      "title": "vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53543",
    "datePublished": "2025-10-04T15:16:52.114Z",
    "dateReserved": "2025-10-04T15:14:15.920Z",
    "dateUpdated": "2026-06-01T16:04:13.122Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53545 (GCVE-0-2023-53545)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-08-05 09:14

Title

drm/amdgpu: unmap and remove csa_va properly

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: unmap and remove csa_va properly Root PD BO should be reserved before unmap and remove a bo_va from VM otherwise lockdep will complain. v2: check fpriv->csa_va is not NULL instead of amdgpu_mcbp (christian) [14616.936827] WARNING: CPU: 6 PID: 1711 at drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c:1762 amdgpu_vm_bo_del+0x399/0x3f0 [amdgpu] [14616.937096] Call Trace: [14616.937097] <TASK> [14616.937102] amdgpu_driver_postclose_kms+0x249/0x2f0 [amdgpu] [14616.937187] drm_file_free+0x1d6/0x300 [drm] [14616.937207] drm_close_helper.isra.0+0x62/0x70 [drm] [14616.937220] drm_release+0x5e/0x100 [drm] [14616.937234] __fput+0x9f/0x280 [14616.937239] ____fput+0xe/0x20 [14616.937241] task_work_run+0x61/0x90 [14616.937246] exit_to_user_mode_prepare+0x215/0x220 [14616.937251] syscall_exit_to_user_mode+0x2a/0x60 [14616.937254] do_syscall_64+0x48/0x90 [14616.937257] entry_SYSCALL_64_after_hwframe+0x63/0xcd

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Assigner

Linux mitre root

References

4 references

URL	Tags
https://git.kernel.org/stable/c/1bc35e637a81dac5f…
https://git.kernel.org/stable/c/ae325b24520839427…
https://git.kernel.org/stable/c/a3a96bf843c356d1d…
https://git.kernel.org/stable/c/5daff15cd013422bc…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: d38ceaf99ed015f2a0b9af3499791bd3a3daae21 , < 1bc35e637a81dac5f5155e83a277c26708c4d4d7 (git) Affected: d38ceaf99ed015f2a0b9af3499791bd3a3daae21 , < ae325b245208394279a1dc412c831ebd71befb0d (git) Affected: d38ceaf99ed015f2a0b9af3499791bd3a3daae21 , < a3a96bf843c356d1d9b2d7f6d0784b6ee28ca9d0 (git) Affected: d38ceaf99ed015f2a0b9af3499791bd3a3daae21 , < 5daff15cd013422bc6d1efcfe82b586800025384 (git)
Linux	Linux	Affected: 4.2 Unaffected: 0 , < 4.2 (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.167 , ≤ 6.1.* (semver) Unaffected: 6.4.12 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c",
            "drivers/gpu/drm/amd/amdgpu/amdgpu_csa.h",
            "drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1bc35e637a81dac5f5155e83a277c26708c4d4d7",
              "status": "affected",
              "version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21",
              "versionType": "git"
            },
            {
              "lessThan": "ae325b245208394279a1dc412c831ebd71befb0d",
              "status": "affected",
              "version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21",
              "versionType": "git"
            },
            {
              "lessThan": "a3a96bf843c356d1d9b2d7f6d0784b6ee28ca9d0",
              "status": "affected",
              "version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21",
              "versionType": "git"
            },
            {
              "lessThan": "5daff15cd013422bc6d1efcfe82b586800025384",
              "status": "affected",
              "version": "d38ceaf99ed015f2a0b9af3499791bd3a3daae21",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c",
            "drivers/gpu/drm/amd/amdgpu/amdgpu_csa.h",
            "drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.2"
            },
            {
              "lessThan": "4.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.12",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "4.2",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: unmap and remove csa_va properly\n\nRoot PD BO should be reserved before unmap and remove\na bo_va from VM otherwise lockdep will complain.\n\nv2: check fpriv-\u003ecsa_va is not NULL instead of amdgpu_mcbp (christian)\n\n[14616.936827] WARNING: CPU: 6 PID: 1711 at drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c:1762 amdgpu_vm_bo_del+0x399/0x3f0 [amdgpu]\n[14616.937096] Call Trace:\n[14616.937097]  \u003cTASK\u003e\n[14616.937102]  amdgpu_driver_postclose_kms+0x249/0x2f0 [amdgpu]\n[14616.937187]  drm_file_free+0x1d6/0x300 [drm]\n[14616.937207]  drm_close_helper.isra.0+0x62/0x70 [drm]\n[14616.937220]  drm_release+0x5e/0x100 [drm]\n[14616.937234]  __fput+0x9f/0x280\n[14616.937239]  ____fput+0xe/0x20\n[14616.937241]  task_work_run+0x61/0x90\n[14616.937246]  exit_to_user_mode_prepare+0x215/0x220\n[14616.937251]  syscall_exit_to_user_mode+0x2a/0x60\n[14616.937254]  do_syscall_64+0x48/0x90\n[14616.937257]  entry_SYSCALL_64_after_hwframe+0x63/0xcd"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code runs in the DRM file release path (`close()`/process exit on /dev/dri/renderD* \u2192 drm_release \u2192 amdgpu_driver_postclose_kms), which requires a local file descriptor on the GPU device node. There is no remote or adjacent-network path to this code.\nAC:L - Triggering the unlocked amdgpu_vm_bo_del() requires nothing more than closing the DRM fd, and the attacker controls both sides of the resulting race \u2014 one thread submits faulting GPU work or VRAM eviction pressure (driving amdgpu_vm_handle_fault/amdgpu_vm_bo_invalidate under the root PD reservation) while another loops open/close. On SR-IOV VFs the CSA path is taken with stock settings, requiring no special tuning.\nPR:L - Only an unprivileged local user with access to the DRM render node is needed \u2014 these are group-accessible on ordinary distributions and available to every app on Android; no capability check exists on the path from drm_release to amdgpu_driver_postclose_kms.\nUI:N - The attacker performs the fd close and the concurrent GPU submissions entirely within their own process; no victim action is involved.\nS:U - Corruption is confined to the guest/host kernel that owns the amdgpu VM; even on an SR-IOV virtual function the VF remains constrained by host GPU/IOMMU isolation, so no security authority is crossed.\nC:H - Unlocked removal from the vm-\u003eva interval tree and vm-\u003efreed list racing with locked traversals leaves freed amdgpu_bo_va_mapping objects reachable, and corrupted GPU page-table updates map DMA-visible memory, yielding an arbitrary-read primitive over kernel memory.\nI:H - The same rb-tree/list corruption and use-after-free on mapping structures provide a write primitive, and because the affected structures drive GPU PTE programming, an attacker can influence which physical memory the GPU is allowed to write.\nA:H - The path contains an explicit BUG_ON() plus the dma_resv_assert_held() WARN reported in the commit \u2014 the latter panics outright under panic_on_warn \u2014 and the underlying race produces oopses from torn interval-tree state on every fd close."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:44.686Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1bc35e637a81dac5f5155e83a277c26708c4d4d7"
        },
        {
          "url": "https://git.kernel.org/stable/c/ae325b245208394279a1dc412c831ebd71befb0d"
        },
        {
          "url": "https://git.kernel.org/stable/c/a3a96bf843c356d1d9b2d7f6d0784b6ee28ca9d0"
        },
        {
          "url": "https://git.kernel.org/stable/c/5daff15cd013422bc6d1efcfe82b586800025384"
        }
      ],
      "title": "drm/amdgpu: unmap and remove csa_va properly",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53545",
    "datePublished": "2025-10-04T15:16:53.452Z",
    "dateReserved": "2025-10-04T15:14:15.920Z",
    "dateUpdated": "2026-08-05T09:14:44.686Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53546 (GCVE-0-2023-53546)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-05-11 19:47

Title

net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx

Summary

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx when mlx5_cmd_exec failed in mlx5dr_cmd_create_reformat_ctx, the memory pointed by 'in' is not released, which will cause memory leak. Move memory release after mlx5_cmd_exec.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/800d8c96bf997da5e…
https://git.kernel.org/stable/c/165159854757dbae0…
https://git.kernel.org/stable/c/00cecb0a8f9e7a217…
https://git.kernel.org/stable/c/3169c3854397f3070…
https://git.kernel.org/stable/c/622d71d99124e69f7…
https://git.kernel.org/stable/c/5dd77585dd9d0e03d…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1d9186476e12c85dc81a0f01f5c614a9683af7f2 , < 800d8c96bf997da5eb76ccf8d88795c4231c83fb (git) Affected: 1d9186476e12c85dc81a0f01f5c614a9683af7f2 , < 165159854757dbae0dfd1812b27051da35aa6223 (git) Affected: 1d9186476e12c85dc81a0f01f5c614a9683af7f2 , < 00cecb0a8f9e7a21754d5ad85813ab6b47b3308f (git) Affected: 1d9186476e12c85dc81a0f01f5c614a9683af7f2 , < 3169c3854397f3070a63b1b772db16dcb8cba7b4 (git) Affected: 1d9186476e12c85dc81a0f01f5c614a9683af7f2 , < 622d71d99124e69f7bf2e2b7a89f5f444a24d235 (git) Affected: 1d9186476e12c85dc81a0f01f5c614a9683af7f2 , < 5dd77585dd9d0e03dd1bceb95f0269a7eaf6b936 (git)
Linux	Linux	Affected: 5.4 Unaffected: 0 , < 5.4 (semver) Unaffected: 5.4.253 , ≤ 5.4.* (semver) Unaffected: 5.10.190 , ≤ 5.10.* (semver) Unaffected: 5.15.126 , ≤ 5.15.* (semver) Unaffected: 6.1.45 , ≤ 6.1.* (semver) Unaffected: 6.4.10 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/mellanox/mlx5/core/steering/dr_cmd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "800d8c96bf997da5eb76ccf8d88795c4231c83fb",
              "status": "affected",
              "version": "1d9186476e12c85dc81a0f01f5c614a9683af7f2",
              "versionType": "git"
            },
            {
              "lessThan": "165159854757dbae0dfd1812b27051da35aa6223",
              "status": "affected",
              "version": "1d9186476e12c85dc81a0f01f5c614a9683af7f2",
              "versionType": "git"
            },
            {
              "lessThan": "00cecb0a8f9e7a21754d5ad85813ab6b47b3308f",
              "status": "affected",
              "version": "1d9186476e12c85dc81a0f01f5c614a9683af7f2",
              "versionType": "git"
            },
            {
              "lessThan": "3169c3854397f3070a63b1b772db16dcb8cba7b4",
              "status": "affected",
              "version": "1d9186476e12c85dc81a0f01f5c614a9683af7f2",
              "versionType": "git"
            },
            {
              "lessThan": "622d71d99124e69f7bf2e2b7a89f5f444a24d235",
              "status": "affected",
              "version": "1d9186476e12c85dc81a0f01f5c614a9683af7f2",
              "versionType": "git"
            },
            {
              "lessThan": "5dd77585dd9d0e03dd1bceb95f0269a7eaf6b936",
              "status": "affected",
              "version": "1d9186476e12c85dc81a0f01f5c614a9683af7f2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/mellanox/mlx5/core/steering/dr_cmd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "lessThan": "5.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.190",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.126",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.45",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.253",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.190",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.126",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.45",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.10",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx\n\nwhen mlx5_cmd_exec failed in mlx5dr_cmd_create_reformat_ctx, the memory\npointed by \u0027in\u0027 is not released, which will cause memory leak. Move memory\nrelease after mlx5_cmd_exec."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:47:03.901Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/800d8c96bf997da5eb76ccf8d88795c4231c83fb"
        },
        {
          "url": "https://git.kernel.org/stable/c/165159854757dbae0dfd1812b27051da35aa6223"
        },
        {
          "url": "https://git.kernel.org/stable/c/00cecb0a8f9e7a21754d5ad85813ab6b47b3308f"
        },
        {
          "url": "https://git.kernel.org/stable/c/3169c3854397f3070a63b1b772db16dcb8cba7b4"
        },
        {
          "url": "https://git.kernel.org/stable/c/622d71d99124e69f7bf2e2b7a89f5f444a24d235"
        },
        {
          "url": "https://git.kernel.org/stable/c/5dd77585dd9d0e03dd1bceb95f0269a7eaf6b936"
        }
      ],
      "title": "net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53546",
    "datePublished": "2025-10-04T15:16:54.132Z",
    "dateReserved": "2025-10-04T15:14:15.921Z",
    "dateUpdated": "2026-05-11T19:47:03.901Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53548 (GCVE-0-2023-53548)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-05-11 19:47

Title

net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb

Summary

In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1 WARNING: CPU: 0 PID: 754 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504 Modules linked in: CPU: 0 PID: 754 Comm: kworker/0:2 Not tainted 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 Workqueue: mld mld_ifc_work RIP: 0010:usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504 Code: 7c 24 18 e8 2c b4 5b fb 48 8b 7c 24 18 e8 42 07 f0 fe 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 a0 c9 fc 8a e8 5a 6f 23 fb <0f> 0b e9 58 f8 ff ff e8 fe b3 5b fb 48 81 c5 c0 05 00 00 e9 84 f7 RSP: 0018:ffffc9000463f568 EFLAGS: 00010086 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 RDX: ffff88801eb28000 RSI: ffffffff814c03b7 RDI: 0000000000000001 RBP: ffff8881443b7190 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000003 R13: ffff88802a77cb18 R14: 0000000000000003 R15: ffff888018262500 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556a99c15a18 CR3: 0000000028c71000 CR4: 0000000000350ef0 Call Trace: <TASK> usbnet_start_xmit+0xfe5/0x2190 drivers/net/usb/usbnet.c:1453 __netdev_start_xmit include/linux/netdevice.h:4918 [inline] netdev_start_xmit include/linux/netdevice.h:4932 [inline] xmit_one net/core/dev.c:3578 [inline] dev_hard_start_xmit+0x187/0x700 net/core/dev.c:3594 ... This bug is caused by the fact that usbnet trusts the bulk endpoint addresses its probe routine receives in the driver_info structure, and it does not check to see that these endpoints actually exist and have the expected type and directions. The fix is simply to add such a check.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

8 references

URL	Tags
https://git.kernel.org/stable/c/a0715d04cf687a7e2…
https://git.kernel.org/stable/c/53c250ea57cf03af4…
https://git.kernel.org/stable/c/a05ac5d00eb7fcb2f…
https://git.kernel.org/stable/c/ec0d0be41721aca68…
https://git.kernel.org/stable/c/27d0f755d649d388f…
https://git.kernel.org/stable/c/1bebbd9b8037a9cc7…
https://git.kernel.org/stable/c/0dd3e0c31bf3e933f…
https://git.kernel.org/stable/c/5e1627cb43ddf1b24…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 2e55cc7210fef90f88201e860d8767594974574e , < a0715d04cf687a7e21f0d6ac8c1d479294a3f6f8 (git) Affected: 2e55cc7210fef90f88201e860d8767594974574e , < 53c250ea57cf03af41339234b9855ae284f9db91 (git) Affected: 2e55cc7210fef90f88201e860d8767594974574e , < a05ac5d00eb7fcb2fda806caa4f56e88df6bc6bb (git) Affected: 2e55cc7210fef90f88201e860d8767594974574e , < ec0d0be41721aca683c5606354a58ee2c687e3f8 (git) Affected: 2e55cc7210fef90f88201e860d8767594974574e , < 27d0f755d649d388fcd12f01436c9a33289e14e3 (git) Affected: 2e55cc7210fef90f88201e860d8767594974574e , < 1bebbd9b8037a9cc75984317cb495dec4824c399 (git) Affected: 2e55cc7210fef90f88201e860d8767594974574e , < 0dd3e0c31bf3e933fb85faf1443833aef90b8e46 (git) Affected: 2e55cc7210fef90f88201e860d8767594974574e , < 5e1627cb43ddf1b24b92eb26f8d958a3f5676ccb (git)
Linux	Linux	Affected: 2.6.14 Unaffected: 0 , < 2.6.14 (semver) Unaffected: 4.14.322 , ≤ 4.14.* (semver) Unaffected: 4.19.291 , ≤ 4.19.* (semver) Unaffected: 5.4.253 , ≤ 5.4.* (semver) Unaffected: 5.10.190 , ≤ 5.10.* (semver) Unaffected: 5.15.126 , ≤ 5.15.* (semver) Unaffected: 6.1.45 , ≤ 6.1.* (semver) Unaffected: 6.4.10 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/usb/usbnet.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "a0715d04cf687a7e21f0d6ac8c1d479294a3f6f8",
              "status": "affected",
              "version": "2e55cc7210fef90f88201e860d8767594974574e",
              "versionType": "git"
            },
            {
              "lessThan": "53c250ea57cf03af41339234b9855ae284f9db91",
              "status": "affected",
              "version": "2e55cc7210fef90f88201e860d8767594974574e",
              "versionType": "git"
            },
            {
              "lessThan": "a05ac5d00eb7fcb2fda806caa4f56e88df6bc6bb",
              "status": "affected",
              "version": "2e55cc7210fef90f88201e860d8767594974574e",
              "versionType": "git"
            },
            {
              "lessThan": "ec0d0be41721aca683c5606354a58ee2c687e3f8",
              "status": "affected",
              "version": "2e55cc7210fef90f88201e860d8767594974574e",
              "versionType": "git"
            },
            {
              "lessThan": "27d0f755d649d388fcd12f01436c9a33289e14e3",
              "status": "affected",
              "version": "2e55cc7210fef90f88201e860d8767594974574e",
              "versionType": "git"
            },
            {
              "lessThan": "1bebbd9b8037a9cc75984317cb495dec4824c399",
              "status": "affected",
              "version": "2e55cc7210fef90f88201e860d8767594974574e",
              "versionType": "git"
            },
            {
              "lessThan": "0dd3e0c31bf3e933fb85faf1443833aef90b8e46",
              "status": "affected",
              "version": "2e55cc7210fef90f88201e860d8767594974574e",
              "versionType": "git"
            },
            {
              "lessThan": "5e1627cb43ddf1b24b92eb26f8d958a3f5676ccb",
              "status": "affected",
              "version": "2e55cc7210fef90f88201e860d8767594974574e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/usb/usbnet.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.14"
            },
            {
              "lessThan": "2.6.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.322",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.291",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.190",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.126",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.45",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.322",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.291",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.253",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.190",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.126",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.45",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.10",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "2.6.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb\n\nThe syzbot fuzzer identified a problem in the usbnet driver:\n\nusb 1-1: BOGUS urb xfer, pipe 3 != type 1\nWARNING: CPU: 0 PID: 754 at drivers/usb/core/urb.c:504 usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504\nModules linked in:\nCPU: 0 PID: 754 Comm: kworker/0:2 Not tainted 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023\nWorkqueue: mld mld_ifc_work\nRIP: 0010:usb_submit_urb+0xed6/0x1880 drivers/usb/core/urb.c:504\nCode: 7c 24 18 e8 2c b4 5b fb 48 8b 7c 24 18 e8 42 07 f0 fe 41 89 d8 44 89 e1 4c 89 ea 48 89 c6 48 c7 c7 a0 c9 fc 8a e8 5a 6f 23 fb \u003c0f\u003e 0b e9 58 f8 ff ff e8 fe b3 5b fb 48 81 c5 c0 05 00 00 e9 84 f7\nRSP: 0018:ffffc9000463f568 EFLAGS: 00010086\nRAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000\nRDX: ffff88801eb28000 RSI: ffffffff814c03b7 RDI: 0000000000000001\nRBP: ffff8881443b7190 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000003\nR13: ffff88802a77cb18 R14: 0000000000000003 R15: ffff888018262500\nFS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000556a99c15a18 CR3: 0000000028c71000 CR4: 0000000000350ef0\nCall Trace:\n \u003cTASK\u003e\n usbnet_start_xmit+0xfe5/0x2190 drivers/net/usb/usbnet.c:1453\n __netdev_start_xmit include/linux/netdevice.h:4918 [inline]\n netdev_start_xmit include/linux/netdevice.h:4932 [inline]\n xmit_one net/core/dev.c:3578 [inline]\n dev_hard_start_xmit+0x187/0x700 net/core/dev.c:3594\n...\n\nThis bug is caused by the fact that usbnet trusts the bulk endpoint\naddresses its probe routine receives in the driver_info structure, and\nit does not check to see that these endpoints actually exist and have\nthe expected type and directions.\n\nThe fix is simply to add such a check."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:47:06.180Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/a0715d04cf687a7e21f0d6ac8c1d479294a3f6f8"
        },
        {
          "url": "https://git.kernel.org/stable/c/53c250ea57cf03af41339234b9855ae284f9db91"
        },
        {
          "url": "https://git.kernel.org/stable/c/a05ac5d00eb7fcb2fda806caa4f56e88df6bc6bb"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec0d0be41721aca683c5606354a58ee2c687e3f8"
        },
        {
          "url": "https://git.kernel.org/stable/c/27d0f755d649d388fcd12f01436c9a33289e14e3"
        },
        {
          "url": "https://git.kernel.org/stable/c/1bebbd9b8037a9cc75984317cb495dec4824c399"
        },
        {
          "url": "https://git.kernel.org/stable/c/0dd3e0c31bf3e933fb85faf1443833aef90b8e46"
        },
        {
          "url": "https://git.kernel.org/stable/c/5e1627cb43ddf1b24b92eb26f8d958a3f5676ccb"
        }
      ],
      "title": "net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53548",
    "datePublished": "2025-10-04T15:16:55.612Z",
    "dateReserved": "2025-10-04T15:14:15.921Z",
    "dateUpdated": "2026-05-11T19:47:06.180Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53550 (GCVE-0-2023-53550)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-05-11 19:47

Title

cpufreq: amd-pstate: fix global sysfs attribute type

Summary

In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate: fix global sysfs attribute type In commit 3666062b87ec ("cpufreq: amd-pstate: move to use bus_get_dev_root()") the "amd_pstate" attributes where moved from a dedicated kobject to the cpu root kobject. While the dedicated kobject expects to contain kobj_attributes the root kobject needs device_attributes. As the changed arguments are not used by the callbacks it works most of the time. However CFI will detect this issue: [ 4947.849350] CFI failure at dev_attr_show+0x24/0x60 (target: show_status+0x0/0x70; expected type: 0x8651b1de) ... [ 4947.849409] Call Trace: [ 4947.849410] <TASK> [ 4947.849411] ? __warn+0xcf/0x1c0 [ 4947.849414] ? dev_attr_show+0x24/0x60 [ 4947.849415] ? report_cfi_failure+0x4e/0x60 [ 4947.849417] ? handle_cfi_failure+0x14c/0x1d0 [ 4947.849419] ? __cfi_show_status+0x10/0x10 [ 4947.849420] ? handle_bug+0x4f/0x90 [ 4947.849421] ? exc_invalid_op+0x1a/0x60 [ 4947.849422] ? asm_exc_invalid_op+0x1a/0x20 [ 4947.849424] ? __cfi_show_status+0x10/0x10 [ 4947.849425] ? dev_attr_show+0x24/0x60 [ 4947.849426] sysfs_kf_seq_show+0xa6/0x110 [ 4947.849433] seq_read_iter+0x16c/0x4b0 [ 4947.849436] vfs_read+0x272/0x2d0 [ 4947.849438] ksys_read+0x72/0xe0 [ 4947.849439] do_syscall_64+0x76/0xb0 [ 4947.849440] ? do_user_addr_fault+0x252/0x650 [ 4947.849442] ? exc_page_fault+0x7a/0x1b0 [ 4947.849443] entry_SYSCALL_64_after_hwframe+0x72/0xdc

Severity

No CVSS data available.

Assigner

Linux mitre root

References

2 references

URL	Tags
https://git.kernel.org/stable/c/ddcfc33a20380508f…
https://git.kernel.org/stable/c/5e720f8c8c9d95928…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 3666062b87ec8be4b85dc475dfb54bb17e10a7f6 , < ddcfc33a20380508f7fea18e1c330abe17ed4fc0 (git) Affected: 3666062b87ec8be4b85dc475dfb54bb17e10a7f6 , < 5e720f8c8c9d959283c3908bbf32a91a01a86547 (git)
Linux	Linux	Affected: 6.4 Unaffected: 0 , < 6.4 (semver) Unaffected: 6.4.11 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/cpufreq/amd-pstate.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ddcfc33a20380508f7fea18e1c330abe17ed4fc0",
              "status": "affected",
              "version": "3666062b87ec8be4b85dc475dfb54bb17e10a7f6",
              "versionType": "git"
            },
            {
              "lessThan": "5e720f8c8c9d959283c3908bbf32a91a01a86547",
              "status": "affected",
              "version": "3666062b87ec8be4b85dc475dfb54bb17e10a7f6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/cpufreq/amd-pstate.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.4"
            },
            {
              "lessThan": "6.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.11",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: amd-pstate: fix global sysfs attribute type\n\nIn commit 3666062b87ec (\"cpufreq: amd-pstate: move to use bus_get_dev_root()\")\nthe \"amd_pstate\" attributes where moved from a dedicated kobject to the\ncpu root kobject.\n\nWhile the dedicated kobject expects to contain kobj_attributes the root\nkobject needs device_attributes.\n\nAs the changed arguments are not used by the callbacks it works most of\nthe time.\nHowever CFI will detect this issue:\n\n[ 4947.849350] CFI failure at dev_attr_show+0x24/0x60 (target: show_status+0x0/0x70; expected type: 0x8651b1de)\n...\n[ 4947.849409] Call Trace:\n[ 4947.849410]  \u003cTASK\u003e\n[ 4947.849411]  ? __warn+0xcf/0x1c0\n[ 4947.849414]  ? dev_attr_show+0x24/0x60\n[ 4947.849415]  ? report_cfi_failure+0x4e/0x60\n[ 4947.849417]  ? handle_cfi_failure+0x14c/0x1d0\n[ 4947.849419]  ? __cfi_show_status+0x10/0x10\n[ 4947.849420]  ? handle_bug+0x4f/0x90\n[ 4947.849421]  ? exc_invalid_op+0x1a/0x60\n[ 4947.849422]  ? asm_exc_invalid_op+0x1a/0x20\n[ 4947.849424]  ? __cfi_show_status+0x10/0x10\n[ 4947.849425]  ? dev_attr_show+0x24/0x60\n[ 4947.849426]  sysfs_kf_seq_show+0xa6/0x110\n[ 4947.849433]  seq_read_iter+0x16c/0x4b0\n[ 4947.849436]  vfs_read+0x272/0x2d0\n[ 4947.849438]  ksys_read+0x72/0xe0\n[ 4947.849439]  do_syscall_64+0x76/0xb0\n[ 4947.849440]  ? do_user_addr_fault+0x252/0x650\n[ 4947.849442]  ? exc_page_fault+0x7a/0x1b0\n[ 4947.849443]  entry_SYSCALL_64_after_hwframe+0x72/0xdc"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:47:08.498Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ddcfc33a20380508f7fea18e1c330abe17ed4fc0"
        },
        {
          "url": "https://git.kernel.org/stable/c/5e720f8c8c9d959283c3908bbf32a91a01a86547"
        }
      ],
      "title": "cpufreq: amd-pstate: fix global sysfs attribute type",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53550",
    "datePublished": "2025-10-04T15:16:57.061Z",
    "dateReserved": "2025-10-04T15:14:15.922Z",
    "dateUpdated": "2026-05-11T19:47:08.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-53552 (GCVE-0-2023-53552)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-08-05 09:14

Title

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

Summary

In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines. (cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-10 20:40 UTC

Assigner

Linux mitre root

References

3 references

URL	Tags
https://git.kernel.org/stable/c/8017a27cec32eac8c…
https://git.kernel.org/stable/c/7fb464d52fa41c31a…
https://git.kernel.org/stable/c/5eefc5307c983b593…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: bcb9aa45d5a0e11ef91245330c53cde214d15e8d , < 8017a27cec32eac8c8f9430b0a3055840136b856 (git) Affected: bcb9aa45d5a0e11ef91245330c53cde214d15e8d , < 7fb464d52fa41c31a6fd1ad82888e67c65935d94 (git) Affected: bcb9aa45d5a0e11ef91245330c53cde214d15e8d , < 5eefc5307c983b59344a4cb89009819f580c84fa (git)
Linux	Linux	Affected: 6.0 Unaffected: 0 , < 6.0 (semver) Unaffected: 6.1.54 , ≤ 6.1.* (semver) Unaffected: 6.5.4 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-53552",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-10T20:40:34.258783Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-11T18:44:03.036Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/i915/gt/intel_engine_types.h",
            "drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c",
            "drivers/gpu/drm/i915/i915_request.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8017a27cec32eac8c8f9430b0a3055840136b856",
              "status": "affected",
              "version": "bcb9aa45d5a0e11ef91245330c53cde214d15e8d",
              "versionType": "git"
            },
            {
              "lessThan": "7fb464d52fa41c31a6fd1ad82888e67c65935d94",
              "status": "affected",
              "version": "bcb9aa45d5a0e11ef91245330c53cde214d15e8d",
              "versionType": "git"
            },
            {
              "lessThan": "5eefc5307c983b59344a4cb89009819f580c84fa",
              "status": "affected",
              "version": "bcb9aa45d5a0e11ef91245330c53cde214d15e8d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/gpu/drm/i915/gt/intel_engine_types.h",
            "drivers/gpu/drm/i915/gt/uc/intel_guc_submission.c",
            "drivers/gpu/drm/i915/i915_request.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.0"
            },
            {
              "lessThan": "6.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.54",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.54",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.4",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915: mark requests for GuC virtual engines to avoid use-after-free\n\nReferences to i915_requests may be trapped by userspace inside a\nsync_file or dmabuf (dma-resv) and held indefinitely across different\nproceses. To counter-act the memory leaks, we try to not to keep\nreferences from the request past their completion.\nOn the other side on fence release we need to know if rq-\u003eengine\nis valid and points to hw engine (true for non-virtual requests).\nTo make it possible extra bit has been added to rq-\u003eexecution_mask,\nfor marking virtual engines.\n\n(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerability is reached only through the i915 DRM device node (/dev/dri/renderD* or card node) via GEM context-create/submit ioctls and fence export; there is no network path.\nAC:L - The attacker controls both the freeing of the virtual engine (destroying the GEM context) and the release of the trapped fence, so the dangling-pointer dereference can be ordered deterministically without winning any uncontrollable race.\nPR:L - Creating parallel/virtual GuC contexts and submitting work requires only access to the DRM render node, available to any ordinary local user with GPU access; no CAP_SYS_ADMIN or real root is needed.\nUI:N - The entire sequence (context create, submit, fence trap, context destroy, fence release) is performed by the attacker\u0027s own process with no victim action required.\nS:U - The use-after-free corrupts kernel heap memory within the kernel\u0027s own security authority; there is no crossing of a VM, IOMMU, or sandbox boundary.\nC:H - The freed guc_virtual_engine object is read (engine-\u003eflags) after being reallocated, and the attacker can spray controlled contents into it, enabling disclosure of kernel memory contents.\nI:H - Beyond controlling freed-object contents, the power-of-2/single-sibling path performs a cmpxchg write into the freed engine\u0027s request_pool field, providing a UAF write primitive usable for heap corruption and control-flow influence.\nA:H - Dereferencing the dangling rq-\u003eengine on the fence-release path readily causes a kernel oops/panic, a reliable denial of service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:45.743Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8017a27cec32eac8c8f9430b0a3055840136b856"
        },
        {
          "url": "https://git.kernel.org/stable/c/7fb464d52fa41c31a6fd1ad82888e67c65935d94"
        },
        {
          "url": "https://git.kernel.org/stable/c/5eefc5307c983b59344a4cb89009819f580c84fa"
        }
      ],
      "title": "drm/i915: mark requests for GuC virtual engines to avoid use-after-free",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53552",
    "datePublished": "2025-10-04T15:16:58.429Z",
    "dateReserved": "2025-10-04T15:14:15.922Z",
    "dateUpdated": "2026-08-05T09:14:45.743Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2025:4301-1

CVE-2023-53538 (GCVE-0-2023-53538)

CVE-2023-53539 (GCVE-0-2023-53539)

CVE-2023-53540 (GCVE-0-2023-53540)

CVE-2023-53541 (GCVE-0-2023-53541)

CVE-2023-53543 (GCVE-0-2023-53543)

CVE-2023-53545 (GCVE-0-2023-53545)

CVE-2023-53546 (GCVE-0-2023-53546)

CVE-2023-53548 (GCVE-0-2023-53548)

CVE-2023-53550 (GCVE-0-2023-53550)

CVE-2023-53552 (GCVE-0-2023-53552)

Tags

Sightings

Nomenclature

Related by attack behaviour