CVE-2023-53238

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
15/09/2025
Last modified:
15/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()<br /> <br /> The size of array &amp;#39;priv-&gt;ports[]&amp;#39; is INNO_PHY_PORT_NUM.<br /> <br /> In the for loop, &amp;#39;i&amp;#39; is used as the index for array &amp;#39;priv-&gt;ports[]&amp;#39;<br /> with a check (i &gt; INNO_PHY_PORT_NUM) which indicates that<br /> INNO_PHY_PORT_NUM is allowed value for &amp;#39;i&amp;#39; in the same loop.<br /> <br /> This &gt; comparison needs to be changed to &gt;=, otherwise it potentially leads<br /> to an out of bounds write on the next iteration through the loop

Impact