Linux Kernel Vulnerability in MHI Host Range Checks

CVE-2023-53598

What is CVE-2023-53598?

A vulnerability in the Linux kernel's MHI host implementation allows for improper range checks on the CHDBOFF and ERDBOFF registers. When the value retrieved from these registers is beyond the acceptable range, it may lead to an invalid memory address calculation, ultimately resulting in a kernel panic. This issue underscores the importance of rigorous validation of register values to prevent catastrophic system failures caused by erroneous data input. A patch has been applied to enhance the range checking mechanisms and protect systems from such crashes.

References