CVE-2023-53034
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-53034
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53034.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-53034
- Downstream
- Related
- Published
- 2025-04-16T14:11:41.985Z
- Modified
- 2025-11-28T02:35:34.048612Z
- Summary
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ntbhwswitchtec: Fix shift-out-of-bounds in switchtecntbmwsettrans
There is a kernel API ntbmwcleartrans() would pass 0 to both addr and size. This would make xlatepos negative.
[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntbhwswitchtec.c:293:7 [ 23.734418] shift exponent -1 is negative
Ensuring xlate_pos is a positive or zero before BIT.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53034.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/0df2e03e4620548b41891b4e0d1bd9d2e0d8a39a
- https://git.kernel.org/stable/c/2429bdf26a0f3950fdd996861e9c1a3873af1dbe
- https://git.kernel.org/stable/c/36d32cfb00d42e865396424bb5d340fc0a28870d
- https://git.kernel.org/stable/c/5b6857bb3bfb0dae17fab1e42c1e82c204a508b1
- https://git.kernel.org/stable/c/7ed22f8d8be26225a78cf5e85b2036421a6bf2d5
- https://git.kernel.org/stable/c/c61a3f2df162ba424be0141649a9ef5f28eaccc1
- https://git.kernel.org/stable/c/cb153bdc1812a3375639ed6ca5f147eaefb65349
- https://git.kernel.org/stable/c/de203da734fae00e75be50220ba5391e7beecdf9
- https://git.kernel.org/stable/c/f56951f211f181410a383d305e8d370993e45294
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53034.json
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-53034
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced1e2fd202f8593985cdadca32e0c322f98e7fe7cbFixedf56951f211f181410a383d305e8d370993e45294Fixed5b6857bb3bfb0dae17fab1e42c1e82c204a508b1Fixed2429bdf26a0f3950fdd996861e9c1a3873af1dbeFixed7ed22f8d8be26225a78cf5e85b2036421a6bf2d5Fixedc61a3f2df162ba424be0141649a9ef5f28eaccc1Fixedcb153bdc1812a3375639ed6ca5f147eaefb65349Fixed36d32cfb00d42e865396424bb5d340fc0a28870dFixed0df2e03e4620548b41891b4e0d1bd9d2e0d8a39aFixedde203da734fae00e75be50220ba5391e7beecdf9
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced4.16.0Fixed5.4.292
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.236
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.180
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.134
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.87
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.23
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.13.11
- Type
- ECOSYSTEM
- Events
-
Introduced6.14.0Fixed6.14.2