In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative. [ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative Ensuring xlate_pos is a positive or zero before BIT.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0df2e03e4620548b41891b4e0d1bd9d2e0d8a39a cve-icon cve-icon
https://git.kernel.org/stable/c/2429bdf26a0f3950fdd996861e9c1a3873af1dbe cve-icon cve-icon
https://git.kernel.org/stable/c/36d32cfb00d42e865396424bb5d340fc0a28870d cve-icon cve-icon
https://git.kernel.org/stable/c/5b6857bb3bfb0dae17fab1e42c1e82c204a508b1 cve-icon cve-icon
https://git.kernel.org/stable/c/7ed22f8d8be26225a78cf5e85b2036421a6bf2d5 cve-icon cve-icon
https://git.kernel.org/stable/c/c61a3f2df162ba424be0141649a9ef5f28eaccc1 cve-icon cve-icon
https://git.kernel.org/stable/c/cb153bdc1812a3375639ed6ca5f147eaefb65349 cve-icon cve-icon
https://git.kernel.org/stable/c/de203da734fae00e75be50220ba5391e7beecdf9 cve-icon cve-icon
https://git.kernel.org/stable/c/f56951f211f181410a383d305e8d370993e45294 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025041650-CVE-2023-53034-8c3b@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53034 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53034 cve-icon
History

Wed, 30 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 6.0, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H'}

Sat, 19 Apr 2025 01:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 16 Apr 2025 14:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative. [ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative Ensuring xlate_pos is a positive or zero before BIT.
Title ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-04-16T14:11:41.985Z

Updated: 2025-05-04T07:48:10.528Z

Reserved: 2025-03-27T16:40:15.758Z

Link: CVE-2023-53034

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-04-16T15:15:52.717

Modified: 2025-04-17T20:22:16.240

Link: CVE-2023-53034

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-04-16T00:00:00Z

Links: CVE-2023-53034 - Bugzilla