CVE-2023-53357

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-53357
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53357.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53357
Downstream
Published
2025-09-17T15:15:39Z
Modified
2025-09-18T13:43:34Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

md/raid10: check slab-out-of-bounds in mdbitmapget_counter

If we write a large number to md/bitmapsetbits, mdbitmapcheckpage() will return -EINVAL because 'page >= bitmap->pages', but the return value was not checked immediately in mdbitmapget_counter() in order to set *blocks value and slab-out-of-bounds occurs.

Move check of 'page >= bitmap->pages' to mdbitmapget_counter() and return directly if true.

References

Affected packages