vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-53397

modpost: fix off by one in is_executable_section()

MEDIUM
5.5
CVSS Score
Published: September 18, 2025 at 01:33 PM UTC
Updated: June 17, 2026 at 06:45 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: modpost: fix off by one in is_executable_section() The > comparison should be >= to prevent an out of bounds array access.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
4.1 ≤ v < 4.14.3224.1 ≤ v < 5.10.1884.1 ≤ v < 5.15.1214.1 ≤ v < 5.4.2514.1 ≤ v < 6.1.394.1 ≤ v < 6.3.134.1 ≤ v < 6.4.44.1 ≤ v < 6.54.15 ≤ v < 5.4.2515.11 ≤ v < 5.15.1215.16 ≤ v < 6.1.395.5 ≤ v < 5.10.1886.2 ≤ v < 6.3.136.4 ≤ v < 6.4.44.152dc0595d540155436d91811f929bdc8afd6a2a1
Vendor states this is fixed in 02dc8e8bdbe4412cfcf17ee3873e63fa5a55b957 (fixed)
Vendor states this is fixed in 3a3f1e573a105328a2cca45a7cfbebabbf5e3192 (fixed)
Vendor states this is fixed in 5e0424cd8a44b5f480feb06753cdf4e1f248d148 (fixed)
Vendor states this is fixed in 7ee557590bac154d324de446d1cd0444988bd511 (fixed)
Vendor states this is fixed in 8b2e77050b91199453bf19d0517b047b7339a9e3 (fixed)
Vendor states this is fixed in cade370efe2f9e2a79ea8587506ffe2b51ac6d2b (fixed)
Vendor states this is fixed in cb0cdca5c979bc34c27602e2039562932c2591a4 (fixed)
Vendor states this is fixed in dd872d5576cc94528f427c7264c2c438928cc6d2 (fixed)
Vendor states this is fixed in 4.1 (unaffected)
Vendor states this is fixed in 4.14.322 (unaffected)
Vendor states this is fixed in 5.10.188 (unaffected)
Vendor states this is fixed in 5.15.121 (unaffected)
Vendor states this is fixed in 5.4.251 (unaffected)
Vendor states this is fixed in 6.1.39 (unaffected)
Vendor states this is fixed in 6.3.13 (unaffected)
Vendor states this is fixed in 6.4.4 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)

References (8)

Patch
Source: cverecord
https://git.kernel.org/stable/c/7ee557590bac154d324de446d1cd0444988bd511
Patch
Source: cverecord
https://git.kernel.org/stable/c/02dc8e8bdbe4412cfcf17ee3873e63fa5a55b957
Patch
Source: cverecord
https://git.kernel.org/stable/c/cb0cdca5c979bc34c27602e2039562932c2591a4
Patch
Source: cverecord
https://git.kernel.org/stable/c/5e0424cd8a44b5f480feb06753cdf4e1f248d148
Patch
Source: cverecord
https://git.kernel.org/stable/c/dd872d5576cc94528f427c7264c2c438928cc6d2
Patch
Source: cverecord
https://git.kernel.org/stable/c/cade370efe2f9e2a79ea8587506ffe2b51ac6d2b
Patch
Source: cverecord
https://git.kernel.org/stable/c/8b2e77050b91199453bf19d0517b047b7339a9e3
Patch
Source: cverecord
https://git.kernel.org/stable/c/3a3f1e573a105328a2cca45a7cfbebabbf5e3192

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.5MEDIUMCISA-ADP
Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-193

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card