CVE-2023-53254

Updated: 2026-01-10 02:23:31.765777

Description:

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Fix shared_cpu_map to handle shared caches at different levels The cacheinfo sets up the shared_cpu_map by checking whether the caches with the same index are shared between CPUs. However, this will trigger slab-out-of-bounds access if the CPUs do not have the same cache hierarchy. Another problem is the mismatched shared_cpu_map when the shared cache does not have the same index between CPUs. CPU0 I D L3 index 0 1 2 x ^ ^ ^ ^ index 0 1 2 3 CPU1 I D L2 L3 This patch checks each cache is shared with all caches on other CPUs.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.1

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.1 HIGH Released CLSA-2026:1767864313 2026-01-08 09:33:44
CentOS 6 ELS kernel 2.6.32 7.1 HIGH Not Vulnerable 2026-01-08 16:47:48
CentOS 8.4 ELS kernel 4.18.0 7.1 HIGH Needs Triage 2025-11-18 06:11:42
CentOS 8.5 ELS kernel 4.18.0 7.1 HIGH Needs Triage 2025-11-18 06:11:41
Oracle Linux 6 ELS kernel 2.6.32 7.1 HIGH Needs Triage 2025-12-14 08:41:47
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.1 HIGH Needs Triage 2025-12-14 07:46:00
Ubuntu 16.04 ELS linux 4.4.0 7.1 HIGH Needs Triage 2025-12-14 07:58:01
Ubuntu 18.04 ELS linux 4.15.0 7.1 HIGH Needs Triage 2025-12-14 07:58:00