CVE-2023-53034

A flaw was found in the Linux kernel. A local user could exploit a shift-out-of-bounds vulnerability within the ntb_hw_switchtec module. This vulnerability arises when the ntb_mw_clear_trans() application programming interface (API) processes zero values for address and size, leading to an invalid memory access. Successful exploitation could result in information disclosure and denial of service.

MODERATE: A shift-out-of-bounds vulnerability was observed in switchtec_ntb_mw_set_trans in drivers/ntb/hw/mscc/ntb_hw_switchtec.c in the Linux Kernel. This flaw may allow a local attacker with a user account on the system to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.