CVE-2023-53598

CVE-2023-53598

High · published October 4, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: host: Range check CHDBOFF and ERDBOFF

If the value read from the CHDBOFF and ERDBOFF registers is outside the

range of the MHI register space then an invalid address might be computed

which later causes a kernel panic. Range check the read value to prevent

a crash due to bad data from the device.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.6th percentile
Published
2025-10-04T20:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 5.7, < 5.10.1925.10.192
linux/linux_kernel≥ 5.11, < 5.15.1125.15.112
linux/linux_kernel≥ 5.16, < 6.1.286.1.28
linux/linux_kernel≥ 6.2, < 6.2.156.2.15
linux/linux_kernel≥ 6.3, < 6.3.26.3.2
References (6)
EPSS history
Timeline
  • 04 OCT 15:44Z
    bus: mhi: host: Range check CHDBOFF and ERDBOFF
    cvelistv5