PT-2025-18876

CVE-2023-53112

·

Published

2023-03-13

·

Updated

2026-07-12

Description by

CVSS 3.1
7.1
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the max subslices array-index-out-of-bounds access
Description A potential out-of-bounds access issue has been identified in the Linux kernel, specifically in the drm/i915/sseu component. This issue was exposed by a commit and reported by UBSAN on a laptop with a gen 11 i915 card. The problem arises from the eu mask->hsw being limited to a maximum of 6 sub-slices, while gen11 sseu info init() can potentially set 8 sub-slices. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations For Linux kernel versions prior to the version containing the fix, consider applying the patch that reserves up to 8 slots for max subslices in the eu mask struct to prevent the array-index-out-of-bounds access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025_16880
CESA-2023_7077
CLSA-2025-1765463110
RHSA-2023:6583
RHSA-2023_6583
RHSA-2023:7077
RHSA-2023_7077
SUSE-SU-2025:01966-1
SUSE-SU-2025:02173-1
SUSE-SU-2025_02173-1
SUSE-SU-2025:2173-1
Found an issue in the description? Have something to add? Feel free to write us 👾