CVE-2023-53238 phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()

🗓️ 15 Sep 2025 14:22:12Reported by LinuxType

Fix an out of bounds write in the Linux kernel hisilicon phy driver due to improper loop bound in probe.

Reporter	Title	Published	Views	Family All 121
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15	19 Jun 202611:10	–	astralinux
BDU FSTEC	The vulnerability of the hisi_inno_phy_probe() function in the drivers/phy/hisilicon/phy-hisi-inno-usb2.c file of the Linux kernel’s PHY driver allows a hacker to cause a service failure.	25 Mar 202600:00	–	bdu_fstec
CNNVD	Linux kernel 安全漏洞	15 Sep 202500:00	–	cnnvd
CVE	CVE-2023-53238	15 Sep 202514:22	–	cve
Debian CVE	CVE-2023-53238	15 Sep 202514:22	–	debiancve
EUVD	EUVD-2023-59846	3 Oct 202520:07	–	euvd
NVD	CVE-2023-53238	15 Sep 202515:15	–	nvd
OpenVAS	openSUSE Security Advisory (SUSE-SU-2025:03600-1)	17 Oct 202500:00	–	openvas
OpenVAS	openSUSE Security Advisory (SUSE-SU-2025:03634-1)	20 Oct 202500:00	–	openvas
OpenVAS	openSUSE Security Advisory (SUSE-SU-2025:3751-1)	27 Oct 202500:00	–	openvas

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
    ],
    "versions": [
      {
        "version": "ba8b0ee81fbbc249e60f84bf097bd56e8047c742",
        "lessThan": "2843a2e703f5cb85c9eeca11b7ee90861635a010",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ba8b0ee81fbbc249e60f84bf097bd56e8047c742",
        "lessThan": "195e806b2afb0bad6470c9094f7e45e0cf109ee0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ba8b0ee81fbbc249e60f84bf097bd56e8047c742",
        "lessThan": "ad249aa3c38f329f91fba8b4b3cd087e79fb0ce8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ba8b0ee81fbbc249e60f84bf097bd56e8047c742",
        "lessThan": "6d8a71e4c3a2fa4960cc50996e76a42b62fab677",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ba8b0ee81fbbc249e60f84bf097bd56e8047c742",
        "lessThan": "01cb355bb92e8fcf8306e11a4774d610c5864e39",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ba8b0ee81fbbc249e60f84bf097bd56e8047c742",
        "lessThan": "ce69eac840db0b559994dc4290fce3d7c0d7bccd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ba8b0ee81fbbc249e60f84bf097bd56e8047c742",
        "lessThan": "13c088cf3657d70893d75cf116be937f1509cc0f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/phy/hisilicon/phy-hisi-inno-usb2.c"
    ],
    "versions": [
      {
        "version": "4.17",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.17",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "4.19.291",
        "lessThanOrEqual": "4.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.253",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.190",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.124",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.43",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.4.8",
        "lessThanOrEqual": "6.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.5",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/01cb355bb92e8fcf8306e11a4774d610c5864e39
git	www.git.kernel.org/stable/c/6d8a71e4c3a2fa4960cc50996e76a42b62fab677
git	www.git.kernel.org/stable/c/ce69eac840db0b559994dc4290fce3d7c0d7bccd
git	www.git.kernel.org/stable/c/2843a2e703f5cb85c9eeca11b7ee90861635a010
git	www.git.kernel.org/stable/c/ad249aa3c38f329f91fba8b4b3cd087e79fb0ce8
git	www.git.kernel.org/stable/c/13c088cf3657d70893d75cf116be937f1509cc0f
git	www.git.kernel.org/stable/c/195e806b2afb0bad6470c9094f7e45e0cf109ee0

11 May 2026 19:40Current

EPSS0.00149