Log in Start free

Vulnerability · Published Oct 1, 2025 · Assigned by Linux

CVE-2023-53465soundwire: qcom: fix storing port config out-of-bounds

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 91.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: soundwire: qcom: fix storing port config out-of-bounds The 'qcom_swrm_ctrl->pconfig' has size of QCOM_SDW_MAX_PORTS (14), however we index it starting from 1, not 0, to match real port numbers. This can lead to writing port config past 'pconfig' bounds and overwriting next member of 'qcom_swrm_ctrl' struct. Reported also by smatch: drivers/soundwire/qcom.c:1269 qcom_swrm_get_port_config() error: buffer overflow 'ctrl->pconfig' 14 <= 14

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.52-1DEBIAN-CVE-2023-53465
Debian:13linux6.4.11-1DEBIAN-CVE-2023-53465
Debian:14linux6.4.11-1DEBIAN-CVE-2023-53465
Ubuntu:22.04:LTSlinux5.15.0-86.96UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-aws5.15.0-1047.52UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-azure5.15.0-1049.56UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1049.56.1UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-gcp5.15.0-1044.52UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-gke5.15.0-1044.49UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1030.35UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-ibm5.15.0-1040.43UBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1043.49UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-kvm5.15.0-1044.49UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-86.95UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1037.37UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1018.18UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1005.5UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-oracle5.15.0-1045.51UBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-raspi5.15.0-1040.43UBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53465
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53465
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1025.29UBUNTU-CVE-2023-53465

Affected products (as reported)

VendorProductVersions
Linux Linux 9916c02ccd74e672b62dd1a9017ac2f237ebf512 – before 20f7c4d51c94abb1a1a7c21900db4fb5afe5c8ff9916c02ccd74e672b62dd1a9017ac2f237ebf512 – before 801daff0078087b5df9145c9f5e643c28129734b9916c02ccd74e672b62dd1a9017ac2f237ebf512 – before 32eb67d7360d48c15883e0d21b29c0aab9da022e9916c02ccd74e672b62dd1a9017ac2f237ebf512 – before 490937d479abe5f6584e69b96df066bc87be92e9
Linux Linux 5.13

References