CVE-2023-53238
Linux Kernel vulnerability analysis and mitigation

Overview

In the Linux kernel, a vulnerability has been identified in the HiSilicon PHY driver, specifically in the hisi_inno_phy_probe() function. The issue involves an incorrect bounds check where the array 'priv->ports[]' of size INNO_PHY_PORT_NUM is accessed with an index 'i' that could potentially exceed the array bounds due to a flawed comparison operator (NVD).

Technical details

The vulnerability stems from a logical error in the bounds checking mechanism within the hisi_inno_phy_probe() function. The comparison operator used (i > INNO_PHY_PORT_NUM) allows INNO_PHY_PORT_NUM as a valid value for the index 'i', which is incorrect since array indices should be strictly less than the array size. This condition should use >= instead of > to prevent potential out-of-bounds write operations (NVD).

Impact

The vulnerability could lead to an out-of-bounds write operation on the next iteration through the loop, potentially causing memory corruption. This could affect systems utilizing the HiSilicon PHY driver in the Linux kernel (NVD).

Mitigation and workarounds

The issue has been resolved through a patch that corrects the bounds checking logic in the hisi_inno_phy_probe() function. The fix involves changing the comparison operator from '>' to '>=' to ensure proper array bounds checking (NVD).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-71142N/AN/A
  • Linux KernelLinux Kernel
  • kernel-uki-virt-addons
NoNoJan 14, 2026
CVE-2025-71137N/AN/A
  • Linux KernelLinux Kernel
  • linux-azure-6.14
NoYesJan 14, 2026
CVE-2025-71135N/AN/A
  • Linux KernelLinux Kernel
  • kernel-debug-modules-internal
NoNoJan 14, 2026
CVE-2025-71134N/AN/A
  • Linux KernelLinux Kernel
  • kernel-64k-debug-modules-core
NoNoJan 14, 2026
CVE-2025-71133N/AN/A
  • Linux KernelLinux Kernel
  • linux-ibm-5.15
NoYesJan 14, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management