Is CVE-2023-53640 in the CISA KEV catalog?

No. CVE-2023-53640 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2023-53640?

CVE-2023-53640 has a CVSS v3 base score of 7.8 (HIGH).

What is the EPSS score for CVE-2023-53640?

CVE-2023-53640 has an EPSS score of 0.19% (9th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-53640?

Upgrade linux on debian 12 to 6.1.37-1 or later. Fixes are available for 157 affected products.

CVE & CISA-KEV Catalog

CVE-2023-53640

HIGH

7.8

CVSS v3

NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN use_after_free out of bounds When we run syzkaller we get below Out of Bounds error. "KASAN: slab-out-of-bounds Read in regcache_flat_read" Below is the backtrace of the issue: BUG: KASAN: slab-out-of-bounds in regcache_flat_read+0x10c/0x110 Read of size 4 at addr ffffff8088fbf714 by task syz-executor.4/14144 CPU: 6 PID: 14144 Comm: syz-executor.4 Tainted: G W Hardware name: Qualcomm Technologies, Inc. sc7280 CRD platform (rev5+) (DT) Call trace: dump_backtrace+0x0/0x4ec show_stack+0x34/0x50 dump_stack_lvl+0xdc/0x11c print_address_description+0x30/0x2d8 kasan_report+0x178/0x1e4 __asan_report_load4_noabort+0x44/0x50 regcache_flat_read+0x10c/0x110 regcache_read+0xf8/0x5a0 _regmap_read+0x45c/0x86c _regmap_update_bits+0x128/0x290 regmap_update_bits_base+0xc0/0x15c snd_soc_component_update_bits+0xa8/0x22c snd_soc_component_write_field+0x68/0xd4 tx_macro_put_dec_enum+0x1d0/0x268 snd_ctl_elem_write+0x288/0x474 By Error checking and checking valid values issue gets rectifies.

CWE-416Use After Free

How to fix

Remediation Available

linuxDebian

Fixed in:6.1.37-1CVE-2023-53640

Fixed in:6.3.7-1CVE-2023-53640

bpftoolRocky

Fixed in:0:7.2.0-362.8.1.el9_3RHSA-2023:6583

bpftoolRed Hat / RHEL

Fixed in:0:7.2.0-362.8.1.el9_3RHSA-2023:6583

bpftool-debuginfoRocky

Fixed in:0:7.2.0-362.8.1.el9_3RHSA-2023:6583

bpftool-debuginfoRed Hat / RHEL

Fixed in:0:7.2.0-362.8.1.el9_3RHSA-2023:6583

kernelRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernelRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64kRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64kRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debugRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debugRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debug-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-64k-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-abi-stablelistsRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-abi-stablelistsRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debugRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debugRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-uki-virtRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debug-uki-virtRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-aarch64Rocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-aarch64Red Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-ppc64leRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-ppc64leRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-s390xRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-s390xRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-x86_64Red Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-debuginfo-common-x86_64Rocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-docRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-docRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rtRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rtRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debugRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debugRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-kvmRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-kvmRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debug-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-kvmRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-kvmRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-rt-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-toolsRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-toolsRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-libsRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-libsRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-libs-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-tools-libs-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-uki-virtRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-uki-virtRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdumpRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdumpRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-develRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-develRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-devel-matchedRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-devel-matchedRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modulesRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modulesRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modules-coreRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modules-coreRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modules-extraRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

kernel-zfcpdump-modules-extraRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

libperfRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

libperfRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

libperf-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

libperf-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

perfRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

perfRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

perf-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

perf-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

python3-perfRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

python3-perfRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

python3-perf-debuginfoRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

python3-perf-debuginfoRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

rtlaRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

rtlaRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

rvRed Hat / RHEL

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

rvRocky

Fixed in:0:5.14.0-362.8.1.el9_3RHSA-2023:6583

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploit Intelligence

0.19%probability of exploitation in 30 days

9thpercentile

Low risk: more likely to be exploited than 9% of all known CVEs.

References

Patch4

Related Vulnerabilities

Other CWE-416 (Use After Free) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2019-0708	Critical	9.8	100%	KEV + Ransom	-
CVE-2021-31166	Critical	9.8	100%	KEV	Fix
CVE-2015-5119	Critical	9.8	99%	KEV	-
CVE-2010-3962	High	8.1	97%	KEV	-
CVE-2015-0313	Critical	9.8	96%	KEV	Fix
CVE-2017-9798	High	7.5	95%	-	Fix

Embed a live status badge for CVE-2023-53640

Markdown

[![CVE-2023-53640](https://tridentstack.com/cve/badge/CVE-2023-53640.svg)](https://tridentstack.com/cve/CVE-2023-53640)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-53640"><img src="https://tridentstack.com/cve/badge/CVE-2023-53640.svg" alt="CVE-2023-53640"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-02-03.