CVE-2023-53242 (GCVE-0-2023-53242)

Vulnerability from cvelistv5 – Published: 2025-09-15 14:23 – Updated: 2026-08-05 09:13
VLAI
Title
thermal/drivers/hisi: Drop second sensor hi3660
Summary
In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 The commit 74c8e6bffbe1 ("driver core: Add __alloc_size hint to devm allocators") exposes a panic "BRK handler: Fatal exception" on the hi3660_thermal_probe funciton. This is because the function allocates memory for only one sensors array entry, but tries to fill up a second one. Fix this by removing the unneeded second access.
Severity
7.1 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-14 17:58 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 , < 3cf2181e438f43ed24e12424fe36d156cca233b9 (git)
Affected: 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 , < e02bc492883abf751fd1a8d89fc025fbce6744c6 (git)
Affected: 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 , < f5aaf140ab1c02889c088e1b1098adad600541af (git)
Affected: 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 , < 9f6756cd09889c7201ee31e6f76fbd914fb0b80d (git)
Affected: 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 , < 68e675a9b69cfc34dd915d91a4650e3ee53421f4 (git)
Affected: 7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460 , < 15cc25829a97c3957e520e971868aacc84341317 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.20
Unaffected: 0 , < 4.20 (semver)
Unaffected: 5.4.235 , ≤ 5.4.* (semver)
Unaffected: 5.10.173 , ≤ 5.10.* (semver)
Unaffected: 5.15.99 , ≤ 5.15.* (semver)
Unaffected: 6.1.16 , ≤ 6.1.* (semver)
Unaffected: 6.2.3 , ≤ 6.2.* (semver)
Unaffected: 6.3 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-53242",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T17:58:08.612232Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T18:02:50.842Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/thermal/hisi_thermal.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3cf2181e438f43ed24e12424fe36d156cca233b9",
              "status": "affected",
              "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
              "versionType": "git"
            },
            {
              "lessThan": "e02bc492883abf751fd1a8d89fc025fbce6744c6",
              "status": "affected",
              "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
              "versionType": "git"
            },
            {
              "lessThan": "f5aaf140ab1c02889c088e1b1098adad600541af",
              "status": "affected",
              "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
              "versionType": "git"
            },
            {
              "lessThan": "9f6756cd09889c7201ee31e6f76fbd914fb0b80d",
              "status": "affected",
              "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
              "versionType": "git"
            },
            {
              "lessThan": "68e675a9b69cfc34dd915d91a4650e3ee53421f4",
              "status": "affected",
              "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
              "versionType": "git"
            },
            {
              "lessThan": "15cc25829a97c3957e520e971868aacc84341317",
              "status": "affected",
              "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/thermal/hisi_thermal.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.235",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.173",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.99",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.235",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.173",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.99",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.16",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.3",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/drivers/hisi: Drop second sensor hi3660\n\nThe commit 74c8e6bffbe1 (\"driver core: Add __alloc_size hint to devm\nallocators\") exposes a panic \"BRK handler: Fatal exception\" on the\nhi3660_thermal_probe funciton.\nThis is because the function allocates memory for only one\nsensors array entry, but tries to fill up a second one.\n\nFix this by removing the unneeded second access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The OOB write occurs only in hi3660_thermal_probe during local platform-driver bind for hisilicon,hi3660-tsensor (HiKey960/Kirin 960 SoC thermal), with no network or adjacent-protocol path into this driver.\nAC:L - On affected hi3660 DT platforms the undersized devm_kzalloc and subsequent sensor[1] stores execute deterministically every probe; no race or attacker-uncontrollable layout is required to hit the OOB write or fortify BRK panic.\nPR:L - The slab OOB runs automatically at boot when HISI_THERMAL probes the DT tsensor, so a local unprivileged user on that device can be present to leverage the resulting adjacent kmalloc-32 corruption without needing sysfs bind (0200) as real root.\nUI:N - Probe and the OOB stores run as part of normal driver init/boot (or privileged rebind); no victim mount, open, or other interactive action is required.\nS:U - Corruption and any resulting oops remain inside the host kernel thermal/driver heap and do not cross a VM, IOMMU, or other security-authority boundary.\nC:N - The overflow only stores fixed constants (HI3660_LITTLE_SENSOR, a rodata string pointer, and the hisi_thermal_data pointer) with no out-of-bounds read or other disclosure primitive.\nI:H - Writing sensor[1] past a one-element allocation is a genuine slab out-of-bounds write that clobbers an adjacent kmalloc-32 object\u0027s pointer fields, which per guidance is High integrity impact.\nA:H - With __alloc_size fortify the OOB triggers a BRK/fatal exception during probe, and without it adjacent-heap corruption can still oops/panic the kernel\u2014Availability High."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:13:15.049Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/3cf2181e438f43ed24e12424fe36d156cca233b9"
        },
        {
          "url": "https://git.kernel.org/stable/c/e02bc492883abf751fd1a8d89fc025fbce6744c6"
        },
        {
          "url": "https://git.kernel.org/stable/c/f5aaf140ab1c02889c088e1b1098adad600541af"
        },
        {
          "url": "https://git.kernel.org/stable/c/9f6756cd09889c7201ee31e6f76fbd914fb0b80d"
        },
        {
          "url": "https://git.kernel.org/stable/c/68e675a9b69cfc34dd915d91a4650e3ee53421f4"
        },
        {
          "url": "https://git.kernel.org/stable/c/15cc25829a97c3957e520e971868aacc84341317"
        }
      ],
      "title": "thermal/drivers/hisi: Drop second sensor hi3660",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53242",
    "datePublished": "2025-09-15T14:23:11.251Z",
    "dateReserved": "2025-09-15T14:19:21.848Z",
    "dateUpdated": "2026-08-05T09:13:15.049Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53242",
      "date": "2026-09-26",
      "epss": "0.0016",
      "percentile": "0.04541"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/thermal/hisi_thermal.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "3cf2181e438f43ed24e12424fe36d156cca233b9",
                    "status": "affected",
                    "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e02bc492883abf751fd1a8d89fc025fbce6744c6",
                    "status": "affected",
                    "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f5aaf140ab1c02889c088e1b1098adad600541af",
                    "status": "affected",
                    "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "9f6756cd09889c7201ee31e6f76fbd914fb0b80d",
                    "status": "affected",
                    "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "68e675a9b69cfc34dd915d91a4650e3ee53421f4",
                    "status": "affected",
                    "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "15cc25829a97c3957e520e971868aacc84341317",
                    "status": "affected",
                    "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/thermal/hisi_thermal.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.20"
                  },
                  {
                    "lessThan": "4.20",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.235",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.173",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.99",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.16",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.2.*",
                    "status": "unaffected",
                    "version": "6.2.3",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.3",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A8FA4EF2-680F-4A67-BC45-C5044EFDF9F3",
                    "versionEndExcluding": "5.4.235",
                    "versionStartIncluding": "4.20.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6",
                    "versionEndExcluding": "5.10.173",
                    "versionStartIncluding": "5.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB",
                    "versionEndExcluding": "5.15.99",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0FD95FDA-6525-4B13-B3FB-49D9995FD8ED",
                    "versionEndExcluding": "6.1.16",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "88C67289-22AD-4CA9-B202-5F5A80E5BA4B",
                    "versionEndExcluding": "6.2.3",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:4.20:-:*:*:*:*:*:*",
                    "matchCriteriaId": "1072305B-94A8-4D68-9419-B786885AA310",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:4.20:rc7:*:*:*:*:*:*",
                    "matchCriteriaId": "82240F8A-B5DF-45CC-8031-CDE3E191D24C",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/drivers/hisi: Drop second sensor hi3660\n\nThe commit 74c8e6bffbe1 (\"driver core: Add __alloc_size hint to devm\nallocators\") exposes a panic \"BRK handler: Fatal exception\" on the\nhi3660_thermal_probe funciton.\nThis is because the function allocates memory for only one\nsensors array entry, but tries to fill up a second one.\n\nFix this by removing the unneeded second access."
          }
        ],
        "id": "CVE-2023-53242",
        "lastModified": "2026-08-04T10:18:59.363",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.2,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2023-53242",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-14T17:58:08.612232Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-09-15T15:15:51.340",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/15cc25829a97c3957e520e971868aacc84341317"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/3cf2181e438f43ed24e12424fe36d156cca233b9"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/68e675a9b69cfc34dd915d91a4650e3ee53421f4"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/9f6756cd09889c7201ee31e6f76fbd914fb0b80d"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e02bc492883abf751fd1a8d89fc025fbce6744c6"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/f5aaf140ab1c02889c088e1b1098adad600541af"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T22:55:46+00:00",
      "cve": "CVE-2023-53242",
      "id": "CVE-2023-53242",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "108",
      "product_status:known_not_affected": "166",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: thermal/drivers/hisi: Drop second sensor hi3660",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53242.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T16:47:44Z",
      "cve": "CVE-2023-53242",
      "id": "CVE-2023-53242",
      "initial_release_date": "2025-09-17T23:29:13Z",
      "product_status:known_affected": "413",
      "product_status:known_not_affected": "326",
      "product_status:recommended": "206",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53242",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53242.json",
      "version": "21"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 5.5,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "NONE",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "LOW",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-53242",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-01-14T17:58:08.612232Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "description": "CWE-noinfo Not enough information",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-01-14T17:58:04.653Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Linux",
              "programFiles": [
                "drivers/thermal/hisi_thermal.c"
              ],
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "vendor": "Linux",
              "versions": [
                {
                  "lessThan": "3cf2181e438f43ed24e12424fe36d156cca233b9",
                  "status": "affected",
                  "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                  "versionType": "git"
                },
                {
                  "lessThan": "e02bc492883abf751fd1a8d89fc025fbce6744c6",
                  "status": "affected",
                  "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                  "versionType": "git"
                },
                {
                  "lessThan": "f5aaf140ab1c02889c088e1b1098adad600541af",
                  "status": "affected",
                  "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                  "versionType": "git"
                },
                {
                  "lessThan": "9f6756cd09889c7201ee31e6f76fbd914fb0b80d",
                  "status": "affected",
                  "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                  "versionType": "git"
                },
                {
                  "lessThan": "68e675a9b69cfc34dd915d91a4650e3ee53421f4",
                  "status": "affected",
                  "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                  "versionType": "git"
                },
                {
                  "lessThan": "15cc25829a97c3957e520e971868aacc84341317",
                  "status": "affected",
                  "version": "7d3a2a2bbadb4bf5856ed394ba09b8fbb7a80460",
                  "versionType": "git"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Linux",
              "programFiles": [
                "drivers/thermal/hisi_thermal.c"
              ],
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "vendor": "Linux",
              "versions": [
                {
                  "status": "affected",
                  "version": "4.20"
                },
                {
                  "lessThan": "4.20",
                  "status": "unaffected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.4.*",
                  "status": "unaffected",
                  "version": "5.4.235",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.10.*",
                  "status": "unaffected",
                  "version": "5.10.173",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.15.*",
                  "status": "unaffected",
                  "version": "5.15.99",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.1.*",
                  "status": "unaffected",
                  "version": "6.1.16",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.2.*",
                  "status": "unaffected",
                  "version": "6.2.3",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "*",
                  "status": "unaffected",
                  "version": "6.3",
                  "versionType": "original_commit_for_fix"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.4.235",
                      "versionStartIncluding": "4.20",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.10.173",
                      "versionStartIncluding": "4.20",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.15.99",
                      "versionStartIncluding": "4.20",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.1.16",
                      "versionStartIncluding": "4.20",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.2.3",
                      "versionStartIncluding": "4.20",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.3",
                      "versionStartIncluding": "4.20",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/drivers/hisi: Drop second sensor hi3660\n\nThe commit 74c8e6bffbe1 (\"driver core: Add __alloc_size hint to devm\nallocators\") exposes a panic \"BRK handler: Fatal exception\" on the\nhi3660_thermal_probe funciton.\nThis is because the function allocates memory for only one\nsensors array entry, but tries to fill up a second one.\n\nFix this by removing the unneeded second access."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
                "version": "3.1"
              },
              "scenarios": [
                {
                  "lang": "en",
                  "value": "AV:L - The OOB write occurs only in hi3660_thermal_probe during local platform-driver bind for hisilicon,hi3660-tsensor (HiKey960/Kirin 960 SoC thermal), with no network or adjacent-protocol path into this driver.\nAC:L - On affected hi3660 DT platforms the undersized devm_kzalloc and subsequent sensor[1] stores execute deterministically every probe; no race or attacker-uncontrollable layout is required to hit the OOB write or fortify BRK panic.\nPR:L - The slab OOB runs automatically at boot when HISI_THERMAL probes the DT tsensor, so a local unprivileged user on that device can be present to leverage the resulting adjacent kmalloc-32 corruption without needing sysfs bind (0200) as real root.\nUI:N - Probe and the OOB stores run as part of normal driver init/boot (or privileged rebind); no victim mount, open, or other interactive action is required.\nS:U - Corruption and any resulting oops remain inside the host kernel thermal/driver heap and do not cross a VM, IOMMU, or other security-authority boundary.\nC:N - The overflow only stores fixed constants (HI3660_LITTLE_SENSOR, a rodata string pointer, and the hisi_thermal_data pointer) with no out-of-bounds read or other disclosure primitive.\nI:H - Writing sensor[1] past a one-element allocation is a genuine slab out-of-bounds write that clobbers an adjacent kmalloc-32 object\u0027s pointer fields, which per guidance is High integrity impact.\nA:H - With __alloc_size fortify the OOB triggers a BRK/fatal exception during probe, and without it adjacent-heap corruption can still oops/panic the kernel\u2014Availability High."
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-05T09:13:15.049Z",
            "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "shortName": "Linux"
          },
          "references": [
            {
              "url": "https://git.kernel.org/stable/c/3cf2181e438f43ed24e12424fe36d156cca233b9"
            },
            {
              "url": "https://git.kernel.org/stable/c/e02bc492883abf751fd1a8d89fc025fbce6744c6"
            },
            {
              "url": "https://git.kernel.org/stable/c/f5aaf140ab1c02889c088e1b1098adad600541af"
            },
            {
              "url": "https://git.kernel.org/stable/c/9f6756cd09889c7201ee31e6f76fbd914fb0b80d"
            },
            {
              "url": "https://git.kernel.org/stable/c/68e675a9b69cfc34dd915d91a4650e3ee53421f4"
            },
            {
              "url": "https://git.kernel.org/stable/c/15cc25829a97c3957e520e971868aacc84341317"
            }
          ],
          "title": "thermal/drivers/hisi: Drop second sensor hi3660",
          "x_generator": {
            "engine": "bippy-1.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "assignerShortName": "Linux",
        "cveId": "CVE-2023-53242",
        "datePublished": "2025-09-15T14:23:11.251Z",
        "dateReserved": "2025-09-15T14:19:21.848Z",
        "dateUpdated": "2026-08-05T09:13:15.049Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.