CVE-2023-53254
Severity CVSS v4.0:
Pending analysis
Type:
CWE-125
Out-of-bounds Read
Publication date:
15/09/2025
Last modified:
14/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
cacheinfo: Fix shared_cpu_map to handle shared caches at different levels<br />
<br />
The cacheinfo sets up the shared_cpu_map by checking whether the caches<br />
with the same index are shared between CPUs. However, this will trigger<br />
slab-out-of-bounds access if the CPUs do not have the same cache hierarchy.<br />
Another problem is the mismatched shared_cpu_map when the shared cache does<br />
not have the same index between CPUs.<br />
<br />
CPU0 I D L3<br />
index 0 1 2 x<br />
^ ^ ^ ^<br />
index 0 1 2 3<br />
CPU1 I D L2 L3<br />
<br />
This patch checks each cache is shared with all caches on other CPUs.
Impact
Base Score 3.x
7.10
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.1.18 (excluding) | |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.2.5 (excluding) |
To consult the complete list of CPE names with products and versions, see this page