CVE-2023-53541: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-53541 was disclosed on October 4, 2025, affecting the Linux kernel's MTD (Memory Technology Device) subsystem, specifically in the BRCM NAND controller driver. The vulnerability involves a potential out-of-bounds access in the OOB (Out-Of-Band) write functionality (NVD, Red Hat).

The vulnerability occurs when the OOB buffer length is not in multiple of words, causing the OOB write function to perform an out-of-bounds read on the OOB source buffer at the last iteration. Red Hat has assigned this vulnerability a CVSS v3.1 base score of 5.5 with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (Red Hat).

The vulnerability could lead to out-of-bounds memory access, potentially causing system instability or crashes. The CVSS scoring indicates that while the vulnerability requires local access and low privileges, it could have a high impact on system availability (Red Hat).

The issue has been fixed by implementing a check on the length limit of the OOB buffer read and filling with 0xff when reaching the end of the buffer to the OOB registers. Various Linux distributions have released patches, including Ubuntu which has fixed the issue in multiple kernel versions (Ubuntu).