CVE-2023-53484 (GCVE-0-2023-53484)

Vulnerability from cvelistv5 – Published: 2025-10-01 11:42 – Updated: 2026-08-05 09:14
VLAI
Title
lib: cpu_rmap: Avoid use after free on rmap->obj array entries
Summary
In the Linux kernel, the following vulnerability has been resolved: lib: cpu_rmap: Avoid use after free on rmap->obj array entries When calling irq_set_affinity_notifier() with NULL at the notify argument, it will cause freeing of the glue pointer in the corresponding array entry but will leave the pointer in the array. A subsequent call to free_irq_cpu_rmap() will try to free this entry again leading to possible use after free. Fix that by setting NULL to the array entry and checking that we have non-zero at the array entry when iterating over the array in free_irq_cpu_rmap(). The current code does not suffer from this since there are no cases where irq_set_affinity_notifier(irq, NULL) (note the NULL passed for the notify arg) is called, followed by a call to free_irq_cpu_rmap() so we don't hit and issue. Subsequent patches in this series excersize this flow, hence the required fix.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 896f97ea95c1d29c0520ee0766b66b7f64cb967c , < 981f339d2905b6a92ef59358158b326493aecac5 (git)
Affected: 896f97ea95c1d29c0520ee0766b66b7f64cb967c , < d1308bd0b24cb1d78fa2747d5fa3e055cc628a48 (git)
Affected: 896f97ea95c1d29c0520ee0766b66b7f64cb967c , < cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000 (git)
Affected: 896f97ea95c1d29c0520ee0766b66b7f64cb967c , < f748e15253833b771acbede14ea98f50831ac289 (git)
Affected: 896f97ea95c1d29c0520ee0766b66b7f64cb967c , < c6ed54dd90698dc0744d669524cc1c122ded8a16 (git)
Affected: 896f97ea95c1d29c0520ee0766b66b7f64cb967c , < c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4 (git)
Affected: 896f97ea95c1d29c0520ee0766b66b7f64cb967c , < 67bca5f1d644f4e79b694abd8052a177de81c37f (git)
Affected: 896f97ea95c1d29c0520ee0766b66b7f64cb967c , < 4e0473f1060aa49621d40a113afde24818101d37 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.8
Unaffected: 0 , < 3.8 (semver)
Unaffected: 4.14.316 , ≤ 4.14.* (semver)
Unaffected: 4.19.284 , ≤ 4.19.* (semver)
Unaffected: 5.4.244 , ≤ 5.4.* (semver)
Unaffected: 5.10.181 , ≤ 5.10.* (semver)
Unaffected: 5.15.113 , ≤ 5.15.* (semver)
Unaffected: 6.1.30 , ≤ 6.1.* (semver)
Unaffected: 6.3.4 , ≤ 6.3.* (semver)
Unaffected: 6.4 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "lib/cpu_rmap.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "981f339d2905b6a92ef59358158b326493aecac5",
              "status": "affected",
              "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
              "versionType": "git"
            },
            {
              "lessThan": "d1308bd0b24cb1d78fa2747d5fa3e055cc628a48",
              "status": "affected",
              "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
              "versionType": "git"
            },
            {
              "lessThan": "cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000",
              "status": "affected",
              "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
              "versionType": "git"
            },
            {
              "lessThan": "f748e15253833b771acbede14ea98f50831ac289",
              "status": "affected",
              "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
              "versionType": "git"
            },
            {
              "lessThan": "c6ed54dd90698dc0744d669524cc1c122ded8a16",
              "status": "affected",
              "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
              "versionType": "git"
            },
            {
              "lessThan": "c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4",
              "status": "affected",
              "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
              "versionType": "git"
            },
            {
              "lessThan": "67bca5f1d644f4e79b694abd8052a177de81c37f",
              "status": "affected",
              "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
              "versionType": "git"
            },
            {
              "lessThan": "4e0473f1060aa49621d40a113afde24818101d37",
              "status": "affected",
              "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "lib/cpu_rmap.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.8"
            },
            {
              "lessThan": "3.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.316",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.284",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.244",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.181",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.316",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.284",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.244",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.181",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.113",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.30",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.4",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "3.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib: cpu_rmap: Avoid use after free on rmap-\u003eobj array entries\n\nWhen calling irq_set_affinity_notifier() with NULL at the notify\nargument, it will cause freeing of the glue pointer in the\ncorresponding array entry but will leave the pointer in the array. A\nsubsequent call to free_irq_cpu_rmap() will try to free this entry again\nleading to possible use after free.\n\nFix that by setting NULL to the array entry and checking that we have\nnon-zero at the array entry when iterating over the array in\nfree_irq_cpu_rmap().\n\nThe current code does not suffer from this since there are no cases\nwhere irq_set_affinity_notifier(irq, NULL) (note the NULL passed for the\nnotify arg) is called, followed by a call to free_irq_cpu_rmap() so we\ndon\u0027t hit and issue. Subsequent patches in this series excersize this\nflow, hence the required fix."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is reached only through local device-configuration and teardown paths (`ethtool -L`/set-channels, interface down, devlink SF/VF teardown, driver unbind) that drive `irq_cpu_rmap_remove()` and `free_irq_cpu_rmap()`. No remote packet or protocol data reaches `lib/cpu_rmap.c`; the RFS receive path only reads `rmap-\u003enear[]`, not the freed glue objects.\nAC:L - The use-after-free is deterministic and requires no race \u2014 releasing an IRQ vector leaves a stale `rmap-\u003eobj[]` entry that the subsequent `free_irq_cpu_rmap()` walk unconditionally dereferences, and the attacker fully controls the ordering and timing of both steps. `CONFIG_RFS_ACCEL` is `default y` (depends on `RPS`), so the required configuration is the norm on distro kernels, and the unbounded window between free and walk lets the attacker reliably groom the `kmalloc-64` slab.\nPR:L - Triggering requires CAP_NET_ADMIN over the affected netdev (ethtool set-channels, link down, devlink SF removal), which per kernel-CNA guidance scores as Low rather than High. In common SR-IOV/container deployments an mlx5 VF netdev is delegated into a network namespace owned by a user namespace, giving an otherwise unprivileged container-local user exactly this capability over the device.\nUI:N - No victim action is needed; the attacker performs both the IRQ-vector release and the subsequent rmap teardown entirely on their own via device reconfiguration.\nS:U - The freed object, the corrupted state, and the resulting impact are all within the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - This is a use-after-free on a `kmalloc-64` GFP_KERNEL object with an attacker-paced reclaim window, so the freed `struct irq_glue` can be reoccupied with sprayed data; the attacker-controlled `notify.irq` then selects an arbitrary `irq_desc`, and the resulting refcount underflow and indirect `-\u003erelease` call chain can be leveraged into arbitrary kernel memory disclosure.\nI:H - After reclaiming the freed glue, `irq_set_affinity_notifier(glue-\u003enotify.irq, NULL)` performs an arbitrary IRQ-descriptor lookup and issues spurious `kref_put(\u0026old_notify-\u003ekref, old_notify-\u003erelease)` calls on a live notifier, producing refcount underflow, premature free, and an indirect call through a function pointer \u2014 a control-flow hijack primitive rather than a mere crash.\nA:H - Even unweaponized, dereferencing the freed glue and passing garbage to `irq_set_affinity_notifier()` corrupts unrelated IRQ descriptor state and oopses/panics the kernel during device teardown, and the double kref_put can prematurely free the cpu_rmap itself."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:18.959Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/981f339d2905b6a92ef59358158b326493aecac5"
        },
        {
          "url": "https://git.kernel.org/stable/c/d1308bd0b24cb1d78fa2747d5fa3e055cc628a48"
        },
        {
          "url": "https://git.kernel.org/stable/c/cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000"
        },
        {
          "url": "https://git.kernel.org/stable/c/f748e15253833b771acbede14ea98f50831ac289"
        },
        {
          "url": "https://git.kernel.org/stable/c/c6ed54dd90698dc0744d669524cc1c122ded8a16"
        },
        {
          "url": "https://git.kernel.org/stable/c/c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4"
        },
        {
          "url": "https://git.kernel.org/stable/c/67bca5f1d644f4e79b694abd8052a177de81c37f"
        },
        {
          "url": "https://git.kernel.org/stable/c/4e0473f1060aa49621d40a113afde24818101d37"
        }
      ],
      "title": "lib: cpu_rmap: Avoid use after free on rmap-\u003eobj array entries",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53484",
    "datePublished": "2025-10-01T11:42:52.590Z",
    "dateReserved": "2025-10-01T11:39:39.402Z",
    "dateUpdated": "2026-08-05T09:14:18.959Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53484",
      "date": "2026-09-27",
      "epss": "0.0016",
      "percentile": "0.04444"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "lib/cpu_rmap.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "981f339d2905b6a92ef59358158b326493aecac5",
                    "status": "affected",
                    "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "d1308bd0b24cb1d78fa2747d5fa3e055cc628a48",
                    "status": "affected",
                    "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000",
                    "status": "affected",
                    "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "f748e15253833b771acbede14ea98f50831ac289",
                    "status": "affected",
                    "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c6ed54dd90698dc0744d669524cc1c122ded8a16",
                    "status": "affected",
                    "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4",
                    "status": "affected",
                    "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "67bca5f1d644f4e79b694abd8052a177de81c37f",
                    "status": "affected",
                    "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4e0473f1060aa49621d40a113afde24818101d37",
                    "status": "affected",
                    "version": "896f97ea95c1d29c0520ee0766b66b7f64cb967c",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "lib/cpu_rmap.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "3.8"
                  },
                  {
                    "lessThan": "3.8",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.14.*",
                    "status": "unaffected",
                    "version": "4.14.316",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.284",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.244",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.181",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.113",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.30",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.3.*",
                    "status": "unaffected",
                    "version": "6.3.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.4",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B7A02E65-365A-4781-BA03-7D649C1BCED3",
                    "versionEndExcluding": "4.14.316",
                    "versionStartIncluding": "3.8.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9112EE64-11F4-46DB-A041-95118F20F81B",
                    "versionEndExcluding": "4.19.284",
                    "versionStartIncluding": "4.15",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "79F47095-8BA3-495A-AED3-2CCA5F2838E6",
                    "versionEndExcluding": "5.4.244",
                    "versionStartIncluding": "4.20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F5B1726B-45AA-47F2-9261-6DC963E92248",
                    "versionEndExcluding": "5.10.181",
                    "versionStartIncluding": "5.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F3D5E1B5-AB9D-4ECC-8F11-F3E1BF761E27",
                    "versionEndExcluding": "5.15.113",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107",
                    "versionEndExcluding": "6.1.30",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B",
                    "versionEndExcluding": "6.3.4",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:3.8:-:*:*:*:*:*:*",
                    "matchCriteriaId": "BEE536AD-20BA-4893-AF2B-B6CF446F5FB3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:3.8:rc4:*:*:*:*:*:*",
                    "matchCriteriaId": "AC348729-8654-4178-851F-5C4BE4B5C806",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:3.8:rc5:*:*:*:*:*:*",
                    "matchCriteriaId": "1A29F057-1966-4A35-83AE-844FF160388B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:3.8:rc6:*:*:*:*:*:*",
                    "matchCriteriaId": "FC426C5C-DA23-494D-888F-4E3712EBA3E2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:3.8:rc7:*:*:*:*:*:*",
                    "matchCriteriaId": "70810C1C-2B24-47DF-9357-E9D755D1BE99",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib: cpu_rmap: Avoid use after free on rmap-\u003eobj array entries\n\nWhen calling irq_set_affinity_notifier() with NULL at the notify\nargument, it will cause freeing of the glue pointer in the\ncorresponding array entry but will leave the pointer in the array. A\nsubsequent call to free_irq_cpu_rmap() will try to free this entry again\nleading to possible use after free.\n\nFix that by setting NULL to the array entry and checking that we have\nnon-zero at the array entry when iterating over the array in\nfree_irq_cpu_rmap().\n\nThe current code does not suffer from this since there are no cases\nwhere irq_set_affinity_notifier(irq, NULL) (note the NULL passed for the\nnotify arg) is called, followed by a call to free_irq_cpu_rmap() so we\ndon\u0027t hit and issue. Subsequent patches in this series excersize this\nflow, hence the required fix."
          }
        ],
        "id": "CVE-2023-53484",
        "lastModified": "2026-08-04T10:19:08.263",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2025-10-01T12:15:51.180",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/4e0473f1060aa49621d40a113afde24818101d37"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/67bca5f1d644f4e79b694abd8052a177de81c37f"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/981f339d2905b6a92ef59358158b326493aecac5"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/c6ed54dd90698dc0744d669524cc1c122ded8a16"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/d1308bd0b24cb1d78fa2747d5fa3e055cc628a48"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/f748e15253833b771acbede14ea98f50831ac289"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:20:00+00:00",
      "cve": "CVE-2023-53484",
      "id": "CVE-2023-53484",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: lib: cpu_rmap: Avoid use after free on rmap-\u003eobj array entries",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53484.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T00:58:29Z",
      "cve": "CVE-2023-53484",
      "id": "CVE-2023-53484",
      "initial_release_date": "2025-10-01T23:30:23Z",
      "product_status:known_affected": "724",
      "product_status:known_not_affected": "170",
      "product_status:recommended": "37",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53484",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53484.json",
      "version": "25"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.