{"id":"CVE-2023-53598","revision":"89c84d72882144579026646efa1bd35b","records":[{"revision":"89c84d72882144579026646efa1bd35b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-53598","aliases":[],"title":"bus: mhi: host: Range check CHDBOFF and ERDBOFF","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbus: mhi: host: Range check CHDBOFF and ERDBOFF\n\nIf the value read from the CHDBOFF and ERDBOFF registers is outside the\nrange of the MHI register space then an invalid address might be computed\nwhich later causes a kernel panic.  Range check the read value to prevent\na crash due to bad data from the device.","state":0,"publishedAt":"2025-10-04T15:44:10.38+00:00","modifiedAt":"2026-10-15T21:41:31.407+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/bus/mhi/host/init.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6cd330ae76ffd5c8f6294c423cabde7eeef1b40c\",\n                            \"lessThan\": \"372f1752b74572b0a9d2288841eab7db17daccae\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6cd330ae76ffd5c8f6294c423cabde7eeef1b40c\",\n                            \"lessThan\": \"2343385fe6eed11d0432ab42a97b3ca4aef06a99\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6cd330ae76ffd5c8f6294c423cabde7eeef1b40c\",\n                            \"lessThan\": \"a2cbb1a45a0c86ce77839c0875414efe1a89315e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6cd330ae76ffd5c8f6294c423cabde7eeef1b40c\",\n                            \"lessThan\": \"83bf6b87e2dd053d95d89eb2f01ae885f9e568db\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6cd330ae76ffd5c8f6294c423cabde7eeef1b40c\",\n                            \"lessThan\": \"4e584127ec2bd42a37c88badb49df409f21fa40a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6cd330ae76ffd5c8f6294c423cabde7eeef1b40c\",\n                            \"lessThan\": \"6a0c637bfee69a74c104468544d9f2a6579626d0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/bus/mhi/host/init.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.7\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.192\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.112\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.28\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.2.15\",\n                            \"lessThanOrEqual\": \"6.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.3.2\",\n                            \"lessThanOrEqual\": \"6.3.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.4\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.4,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/372f1752b74572b0a9d2288841eab7db17daccae","https://git.kernel.org/stable/c/2343385fe6eed11d0432ab42a97b3ca4aef06a99","https://git.kernel.org/stable/c/a2cbb1a45a0c86ce77839c0875414efe1a89315e","https://git.kernel.org/stable/c/83bf6b87e2dd053d95d89eb2f01ae885f9e568db","https://git.kernel.org/stable/c/4e584127ec2bd42a37c88badb49df409f21fa40a","https://git.kernel.org/stable/c/6a0c637bfee69a74c104468544d9f2a6579626d0"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-53598","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-53598","identifiers":["CVE-2023-53598"]},"retained":false,"historicalAffected":[]}],"coverage":[]}