CVE-2023-53840: usb: early: xhci-dbc: Fix a potential out-of-bound memory access
Vulnerability summary
CVE-2023-53840 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15.7% of scored vulnerabilities.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 09-12-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbc_bulk_write() fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbc_trace() is called. Reserve an extra byte, which will be zeroed automatically because 'buf' is a static variable, in order to avoid troubles, should it happen.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu121 products
- linuxAll versions (No fix recorded) | < 5.15.0-75.82
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1038.43
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.20-1
Linux1 product
- linux≥ aeb9dd1de98c1a5f2007ea5d2a154c1244caf8a0, < e8fb0f13e45cf361fd06593d3cb2d89915cd3bd0 | ≥ aeb9dd1de98c1a5f2007ea5d2a154c1244caf8a0, < 351c8d8650d1ccc006255fa01f98b6c6496a02e5 | ≥ aeb9dd1de98c1a5f2007ea5d2a154c1244caf8a0, < df7c8aba7309f4dc55df94e06b67f576c0f52406 | ≥ aeb9dd1de98c1a5f2007ea5d2a154c1244caf8a0, < a4a97ab3db5c081eb6e7dba91306adefb461e0bd | 4.12
3 vendors · 123 products
