CVE-2023-53034

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53034
In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative. [ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative Ensuring xlate_pos is a positive or zero before BIT.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0df2e03e4620548b41891b4e0d1bd9d2e0d8a39a Patch
https://git.kernel.org/stable/c/2429bdf26a0f3950fdd996861e9c1a3873af1dbe Patch
https://git.kernel.org/stable/c/36d32cfb00d42e865396424bb5d340fc0a28870d Patch
https://git.kernel.org/stable/c/5b6857bb3bfb0dae17fab1e42c1e82c204a508b1 Patch
https://git.kernel.org/stable/c/7ed22f8d8be26225a78cf5e85b2036421a6bf2d5 Patch
https://git.kernel.org/stable/c/c61a3f2df162ba424be0141649a9ef5f28eaccc1 Patch
https://git.kernel.org/stable/c/cb153bdc1812a3375639ed6ca5f147eaefb65349 Patch
https://git.kernel.org/stable/c/de203da734fae00e75be50220ba5391e7beecdf9 Patch
https://git.kernel.org/stable/c/f56951f211f181410a383d305e8d370993e45294 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

28 Oct 2025, 18:53

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0df2e03e4620548b41891b4e0d1bd9d2e0d8a39a - () https://git.kernel.org/stable/c/0df2e03e4620548b41891b4e0d1bd9d2e0d8a39a - Patch
References () https://git.kernel.org/stable/c/2429bdf26a0f3950fdd996861e9c1a3873af1dbe - () https://git.kernel.org/stable/c/2429bdf26a0f3950fdd996861e9c1a3873af1dbe - Patch
References () https://git.kernel.org/stable/c/36d32cfb00d42e865396424bb5d340fc0a28870d - () https://git.kernel.org/stable/c/36d32cfb00d42e865396424bb5d340fc0a28870d - Patch
References () https://git.kernel.org/stable/c/5b6857bb3bfb0dae17fab1e42c1e82c204a508b1 - () https://git.kernel.org/stable/c/5b6857bb3bfb0dae17fab1e42c1e82c204a508b1 - Patch
References () https://git.kernel.org/stable/c/7ed22f8d8be26225a78cf5e85b2036421a6bf2d5 - () https://git.kernel.org/stable/c/7ed22f8d8be26225a78cf5e85b2036421a6bf2d5 - Patch
References () https://git.kernel.org/stable/c/c61a3f2df162ba424be0141649a9ef5f28eaccc1 - () https://git.kernel.org/stable/c/c61a3f2df162ba424be0141649a9ef5f28eaccc1 - Patch
References () https://git.kernel.org/stable/c/cb153bdc1812a3375639ed6ca5f147eaefb65349 - () https://git.kernel.org/stable/c/cb153bdc1812a3375639ed6ca5f147eaefb65349 - Patch
References () https://git.kernel.org/stable/c/de203da734fae00e75be50220ba5391e7beecdf9 - () https://git.kernel.org/stable/c/de203da734fae00e75be50220ba5391e7beecdf9 - Patch
References () https://git.kernel.org/stable/c/f56951f211f181410a383d305e8d370993e45294 - () https://git.kernel.org/stable/c/f56951f211f181410a383d305e8d370993e45294 - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ntb_hw_switchtec: Se corrige el desplazamiento fuera de los límites en switchtec_ntb_mw_set_trans. Existe una API del kernel ntb_mw_clear_trans() que pasaría 0 tanto a addr como a size. Esto haría que xlate_pos fuera negativo. [ 23.734156] switchtec switchtec0: MW 0: parte 0 addr 0x0000000000000000 tamaño 0x0000000000000000 [ 23.734158] ======================================================================================== [ 23.734172] UBSAN: desplazamiento fuera de los límites en drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] el exponente de desplazamiento -1 es negativo. Se garantiza que xlate_pos sea positivo o cero antes de BIT.
CWE CWE-125
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

16 Apr 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-16 15:15

Updated : 2025-10-28 18:53

NVD link : CVE-2023-53034

Mitre link : CVE-2023-53034

CVE.ORG link : CVE-2023-53034

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read