CVE-2023-53654 [Medium] | Security Vulnerability in Linux Kernel

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation before accessing cgx and lmac with the addition of new MAC blocks like CN10K RPM and CN10KB RPM_USX, LMACs are noncontiguous and CGX blocks are also noncontiguous. But during RVU driver initialization, the driver is assuming they are contiguous and trying to access cgx or lmac with their id which is resulting in kernel panic. This patch fixes the issue by adding proper checks. [ 23.219150] pc : cgx_lmac_read+0x38/0x70 [ 23.219154] lr : rvu_program_channels+0x3f0/0x498 [ 23.223852] sp : ffff000100d6fc80 [ 23.227158] x29: ffff000100d6fc80 x28: ffff00010009f880 x27: 000000000000005a [ 23.234288] x26: ffff000102586768 x25: 0000000000002500 x24: fffffffffff0f000

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2025-10-08	—	0.02%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2025-10-08

—

0.02%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
5.5	3.1	MEDIUM	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H` Click to expand Attack vector (AV:L) They already need access on the box, or another person has to do something wrong; it’s not a remote drive-by. Attack complexity (AC:L) Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup. Privileges required (PR:L) A normal user session is enough; they don’t have to be admin. User interaction (UI:N) Nobody has to click “OK” or open a trap file; it can work without a victim helping. Scope (S:U) Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems. Confidentiality (C:N) Doesn’t really leak secrets in a meaningful way. Integrity (I:N) Data isn’t meaningfully altered or forged. Availability (A:H) Could take the service down hard or make it unusable for people who depend on it.	1.8	3.6	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

5.5

3.1

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Click to expand

Attack vector (AV:L): They already need access on the box, or another person has to do something wrong; it’s not a remote drive-by.
Attack complexity (AC:L): Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:L): A normal user session is enough; they don’t have to be admin.
User interaction (UI:N): Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U): Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N): Doesn’t really leak secrets in a meaningful way.
Integrity (I:N): Data isn’t meaningfully altered or forged.
Availability (A:H): Could take the service down hard or make it unusable for people who depend on it.

1.8

3.6

[email protected]

OS Trackers for CVE-2023-53654

vendor	priority	summary	link
`debian`	unimportant	CVE-2023-53654 unimportant priority: Debian including 1 source packages (linux), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5.	https://security-tracker.debian.org/tracker/CVE-2023-53654
`redhat`	medium	—	https://access.redhat.com/security/cve/CVE-2023-53654
`suse`	medium	CVE-2023-53654 severity moderate: SUSE including 444 source package names (2.1.3-6.88:kernel-default-base-6.4.0-36.1.21.13, 2.1.3-7.105:kernel-rt-6.4.0-38.1, …), 817 product×package rows across 167 product lines (Container suse/sl-micro/6.0/base-os-container, Container suse/sl-micro/6.0/kvm-os-container, … (167 product lines)): Fixed 485, Known Affected 231, Known Not Affected 101.	https://www.suse.com/security/cve/CVE-2023-53654/
`ubuntu`	medium	CVE-2023-53654 medium priority: Ubuntu including 158 source packages (linux, linux-allwinner-5.19, …), 1414 status rows across 9 suites (bionic, focal, jammy, noble, plucky, questing, trusty, upstream, xenial): DNE 1017, ignored 158, not-affected 122, released 116, needs-triage 1.	https://ubuntu.com/security/CVE-2023-53654

Affected software / configurations for CVE-2023-53654

Vendor	Product	Version	Raw CPE
linux	linux_kernel	>= 5.12, < 5.15.121	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	>= 5.16, < 6.1.39	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	>= 6.2, < 6.4.4	cpe:2.3:o:linux:linux_kernel::::::::

References for CVE-2023-53654

URL	Tags
https://git.kernel.org/stable/c/79ebb53772c95d3a6ae51b3c65f9985fdd430df6	Patch
https://git.kernel.org/stable/c/a5485a943193e55c79150382e6461e8ea759e96e	Patch
https://git.kernel.org/stable/c/b04872e15f3df62cb2fd530950f769626e1ef489	Patch
https://git.kernel.org/stable/c/e425e2ba933618ee5ec8e4f3eb341efeb6c9ddef	Patch

URL

CVE-2023-53654 | octeontx2-af: Add validation before accessing cgx and lmac

Exploit prediction scoring system (EPSS) score for CVE-2023-53654

Common vulnerability scoring system (CVSS) metrics for CVE-2023-53654

Weakness enumeration for CVE-2023-53654

OS Trackers for CVE-2023-53654

Affected software / configurations for CVE-2023-53654

References for CVE-2023-53654