CVE-2023-53729: linux
Vulnerability summary
CVE-2023-53729 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 4% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 10 · Related 10Timeline
- 22-10-2025PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmi_encdec: Restrict string length in decode The QMI TLV value for strings in a lot of qmi element info structures account for null terminated strings with MAX_LEN + 1. If a string is actually MAX_LEN + 1 length, this will cause an out of bounds access when the NULL character is appended in decoding.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.15%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
0.00 pp
From 0.15% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu118 products
- linux< 5.4.0-169.187 | < 5.15.0-94.104
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.4.0-1116.126 | < 5.15.0-1053.58
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.55-1 | < 6.5.6-1
Linux1 product
- linux≥ 9b8a11e82615274d4133aab3cf5aa1c59191f0a2, < 6b58859e7c4ac357517a59f0801e8ce1b58a8ee2 | ≥ 9b8a11e82615274d4133aab3cf5aa1c59191f0a2, < 64c5e916fabe5ef7bef0210b8a59fa8941ee1b8e | ≥ 9b8a11e82615274d4133aab3cf5aa1c59191f0a2, < 2ccab9f82772ead618689d17dbc6950d6bd1e741 | ≥ 9b8a11e82615274d4133aab3cf5aa1c59191f0a2, < b2f39b813d1eed4a522428d1e6acd7dfe9b81579 | ≥ 9b8a11e82615274d4133aab3cf5aa1c59191f0a2, < f6250ecb7fbb934b89539e7e2ba6c1d8555c0975 | ≥ 9b8a11e82615274d4133aab3cf5aa1c59191f0a2, < 22ee7c9c7f381be178b4457bc54530002e08e938 | ≥ 9b8a11e82615274d4133aab3cf5aa1c59191f0a2, < 8d207400fd6b79c92aeb2f33bb79f62dff904ea2 | 4.16
3 vendors · 120 products
