CVE-2023-53465CWE-125

CVE-2023-53465

High · published October 1, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

soundwire: qcom: fix storing port config out-of-bounds

The 'qcom_swrm_ctrl->pconfig' has size of QCOM_SDW_MAX_PORTS (14),

however we index it starting from 1, not 0, to match real port numbers.

This can lead to writing port config past 'pconfig' bounds and

overwriting next member of 'qcom_swrm_ctrl' struct. Reported also by

smatch:

drivers/soundwire/qcom.c:1269 qcom_swrm_get_port_config() error: buffer overflow 'ctrl->pconfig' 14 <= 14

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00185 · 7.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-10-01T16:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 5.13, < 5.15.1215.15.121
linux/linux_kernel≥ 5.16, < 6.1.406.1.40
linux/linux_kernel≥ 6.2, < 6.4.56.4.5
References (4)
https://git.kernel.org/stable/c/20f7c4d51c94abb1a1a7c21900db4fb5afe5c8ff · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/32eb67d7360d48c15883e0d21b29c0aab9da022e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/490937d479abe5f6584e69b96df066bc87be92e9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/801daff0078087b5df9145c9f5e643c28129734b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 01 OCT 11:42Z
    soundwire: qcom: fix storing port config out-of-bounds
    cvelistv5