CVE-2023-53708: linux
Vulnerability summary
CVE-2023-53708 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 15 · Related 14Timeline
- 22-10-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects If a badly constructed firmware includes multiple `ACPI_TYPE_PACKAGE` objects while evaluating the AMD LPS0 _DSM, there will be a memory leak. Explicitly guard against this.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
11%
Versus all other CVEs
30-day change
+0.01 pp
From 0.20% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu123 products
- linuxAll versions (No fix recorded) | < 5.15.0-94.104
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1053.58
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.55-1 | < 6.5.6-1
Linux1 product
- linux≥ 146f1ed852a87b802ed6e71c31e189c64871383c, < 7b7964cd9db30bc84808a40d13a0633b4313f149 | ≥ 146f1ed852a87b802ed6e71c31e189c64871383c, < 1ea7e47807279369c82718efd2677ea25c6579e3 | ≥ 146f1ed852a87b802ed6e71c31e189c64871383c, < 9e8bbde9293151430884aed882a88eaa22298f72 | ≥ 146f1ed852a87b802ed6e71c31e189c64871383c, < 883cf0d4cf288313b71146ddebdf5d647b76c78b | 5.11
3 vendors · 125 products