7.8

CVE-2023-53819: linux

CVSS: 7.8v3.1HighDeferred
AliasesUBUNTU-CVE-2023-53819DEBIAN-CVE-2023-53819
Published 09-12-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2023-53819 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.2% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.14%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 14 · Related 13
RHSA-2024:2394SUSE-SU-2026:0263-1SUSE-SU-2026:0278-1SUSE-SU-2026:0281-1SUSE-SU-2026:0293-1SUSE-SU-2026:0315-1

Timeline

  1. 09-12-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: amdgpu: validate offset_in_bo of drm_amdgpu_gem_va This is motivated by OOB access in amdgpu_vm_update_range when offset_in_bo+map_size overflows. v2: keep the validations in amdgpu_vm_bo_map v3: add the validations to amdgpu_vm_bo_map/amdgpu_vm_bo_replace_map rather than to amdgpu_gem_va_ioctl

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

0.00 pp

From 0.14% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu124 products
  • linuxAll versions (No fix recorded) | < 5.15.0-86.96
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1047.52
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.52-1 | < 6.4.4-1
Linux1 product
  • linux≥ 9f7eb5367d0001536c361bd1400e14521f854ff1, < 82aace80cfaab778245bd2f9e31b67953725e4d0 | ≥ 9f7eb5367d0001536c361bd1400e14521f854ff1, < d83c337e654d58d3edd15a2ae76e87dc601c07d9 | ≥ 9f7eb5367d0001536c361bd1400e14521f854ff1, < 968e27fd037ec4732068820a9b9836eccc0e0a12 | ≥ 9f7eb5367d0001536c361bd1400e14521f854ff1, < 4300a47e4017c9febb60ffa7d39723eeaed00f2b | ≥ 9f7eb5367d0001536c361bd1400e14521f854ff1, < b10db1d2137415e5e7f9706d96cfe77539c499d4 | ≥ 9f7eb5367d0001536c361bd1400e14521f854ff1, < f015aadc0d973047f49526a127e900c488d4e425 | ≥ 9f7eb5367d0001536c361bd1400e14521f854ff1, < bc6dbf34dc4fb639522f3e8e66ef05997c0441ee | ≥ 9f7eb5367d0001536c361bd1400e14521f854ff1, < 9f0bcf49e9895cb005d78b33a5eebfa11711b425 | 4.2

3 vendors · 126 products

References

12 links
Show all 12 references