CVE-2023-53768

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds access issue exists in the regmap add irq chip fwnode() function within the drivers/base/regmap/regmap-irq.c module. The issue occurs during the allocation of a 2D array for handling IRQ type registers. While the system intends to allocate a matrix with num config bases rows and num config regs columns, the logic erroneously performs the allocation num config regs times instead of num config bases times. When num config regs is greater than num config bases, this leads to memory corruption and out-of-bounds access. This flaw can be exploited to cause a denial of service, and real-world crashes were reported on Qualcomm db845c hardware. KASAN (Kernel Address Sanitizer), a dynamic memory error detector for the Linux kernel, was used to identify the invalid access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.