CVE-2023-53019 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobus_get_phy() The caller may pass any value as addr, what may result in an out-of-bounds access to array mdio_map. One existing case is stmmac_init_phy() that may pass -1 as addr. Therefore validate addr before using it.
A vulnerability in the Linux kernel's MDIO bus management can lead to an out-of-bounds access in the MDIO map array. This issue arises because the function 'mdiobus_get_phy()' does not validate the 'addr' parameter, allowing the caller to pass arbitrary values. For example, 'stmmac_init_phy()' may send -1 as the address, which triggers the out-of-bounds access.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1d80c259dfbadefa61b7ea334dfce5cb57f8c72f | kernel.org | Patch |
| https://git.kernel.org/stable/c/4bc5f1f6bc94e695dfd912122af96e7115a0ddb8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7879626296e6ffd838ae0f2af1ab49ee46354973 | kernel.org | Patch |
| https://git.kernel.org/stable/c/867dbe784c5010a466f00a7d1467c1c5ea569c75 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8a7b9560a3a8eb8724888c426e05926752f73aa0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ad67de330d83e8078372b52af18ffe8d39e26c85 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c431a3d642593bbdb99e8a9e3eed608b730db6f8 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-129 | Improper Validation of Array Index | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.5, < 4.14.305 >= 4.15, < 4.19.272 >= 4.20, < 5.4.231 >= 5.5, < 5.10.166 >= 5.11, < 5.15.91 >= 5.16, < 6.1.9 6.2 rc1 6.2 rc2 6.2 rc3 6.2 rc4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 30, 2025 | Initial Analysis | [email protected] |
| Mar 27, 2025 | New CVE Received | kernel.org |