CVE-2023-53019

Published: Mar 27, 2025Modified: Oct 30, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller may pass any value as addr, what may result in an out-of-bounds access to array mdio_map. One existing case is stmmac_init_phy() that may pass -1 as addr. Therefore validate addr before using it.

Affected (10)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.15 to 4.19.272
Linux Linux Kernel	From 4.20 to 5.4.231
Linux Linux Kernel	From 4.5 to 4.14.305
Linux Linux Kernel	From 5.11 to 5.15.91
Linux Linux Kernel	From 5.16 to 6.1.9
Linux Linux Kernel	From 5.5 to 5.10.166
Linux Linux Kernel	Version 6.2 rc1
Linux Linux Kernel	Version 6.2 rc2
Linux Linux Kernel	Version 6.2 rc3
Linux Linux Kernel	Version 6.2 rc4