Cyber Resilience

CVE-2023-53258

Memory Safety in Linux Kernel 6.0.1 – 6.1.43

Published
15 September 2025
Modified
14 January 2026
Patch / advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0013 3th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2023-53258 is a medium-severity Wrap or Wraparound (CWE-191) vulnerability in Linux Linux Kernel. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix possible underflow for displays with large vblank [Why] Underflow observed when using a display with a large vblank region and low refresh rate [How] Simplify calculation of vblank_nom…

more

Increase value for VBlankNomDefaultUS to 800us

CWE(s)

Related Threats

CVEs Like This One

CVE-2024-26828Same product: Linux Linux Kernel
CVE-2026-43301Same product: Linux Linux Kernel
CVE-2026-23069Same product: Linux Linux Kernel
CVE-2026-43187Same product: Linux Linux Kernel
CVE-2026-46107Same product: Linux Linux Kernel
CVE-2024-53081Same product: Linux Linux Kernel
CVE-2023-53679Same product: Linux Linux Kernel
CVE-2026-31417Same product: Linux Linux Kernel
CVE-2026-43171Same product: Linux Linux Kernel
CVE-2024-35980Same product: Linux Linux Kernel

Affected Assets

linux
linux kernel
6.0 · 6.0.1 — 6.1.43 · 6.2 — 6.4.8

Mitigating Controls

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 full match
prevents

Secure SDLC practices directly prevent integer underflow defects via input validation, bounds checking, and static analysis.

ID.RA-01 partial match
prevents

Vulnerability scanning and code analysis can surface underflow flaws after they are introduced.

PR.PS-02 partial match
prevents

Routine patching can remediate known underflow bugs once they are discovered in deployed software.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing in development catches integer underflow defects before release.

prevents

Secure development lifecycle mandates input validation and arithmetic checks that prevent integer underflow.

prevents

Application security requirements include bounds checking and safe arithmetic to avoid underflow conditions.

prevents

Secure architecture principles require defensive coding patterns that mitigate integer wraparound risks.

prevents

Secure coding standards directly prescribe safe integer handling and overflow/underflow prevention.

References