Review reviewHigh

CVE-2023-53646

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: drm/i915/perf: add sentinel to xehp_oa_b_counters Arrays passed to reg_in_range_table should end with empty record. The patch solves KASAN detected bug with signature: BUG: KASAN: global-out-of-bounds in xehp_is_valid_b_counter_addr+0x2c7/0x350 [i915] Read of size 4 at addr ffffffffa1555d90 by task perf/1518 CPU: 4 PID: 1518 Comm: perf Tainted: G U 6.4.0-kasan_438-g3303d06107f3+ #1 Hardware name: Intel Corporation Meteor Lake Client Platform/MTL-P DDR5 SODIMM SBS RVP, BIOS MTLPFWI1.R00.3223.D80.2305311348 05/31/2023 Call Tr...

CVSS: 7.1
EPSS: 0.18%
CISA KEV: Not listed
Published: 2025.10.08

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.18%

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 0fa9349dda030fa847b36f880a5eea25c3202b66 < 21d92025e80629fd5c25cd6751f8cf38c784dd4a, >= 0fa9349dda030fa847b36f880a5eea25c3202b66 < 785b3f667b4bf98804cad135005e964df0c750de, >= 6.2, >= 6.2 < 6.4.7, 6.5
Fixed versions: 6.4.7

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE: CWE-125