CVE-2023-53034

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

State: Published
Severity: 7.1 High
Published: Apr 16, 2025
Updated: Aug 5, 2026
Reserved: Mar 27, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.

[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative

Ensuring xlate_pos is a positive or zero before BIT.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before f56951f211f181410a383d305e8d370993e45294Affected 1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 5b6857bb3bfb0dae17fab1e42c1e82c204a508b1Affected 1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 2429bdf26a0f3950fdd996861e9c1a3873af1dbeAffected 1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 7ed22f8d8be26225a78cf5e85b2036421a6bf2d5Affected 1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before c61a3f2df162ba424be0141649a9ef5f28eaccc1Affected 1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before cb153bdc1812a3375639ed6ca5f147eaefb65349Affected 1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 36d32cfb00d42e865396424bb5d340fc0a28870dAffected 1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 0df2e03e4620548b41891b4e0d1bd9d2e0d8a39aAffected 1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before de203da734fae00e75be50220ba5391e7beecdf9Affected
LinuxLinux	4.16Affected before 4.16Not affected 5.4.292 through 5.4.Not affected 5.10.236 through 5.10.Not affected 5.15.180 through 5.15.Not affected 6.1.134 through 6.1.Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before f56951f211f181410a383d305e8d370993e45294Affected
1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 5b6857bb3bfb0dae17fab1e42c1e82c204a508b1Affected
1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 2429bdf26a0f3950fdd996861e9c1a3873af1dbeAffected
1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 7ed22f8d8be26225a78cf5e85b2036421a6bf2d5Affected
1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before c61a3f2df162ba424be0141649a9ef5f28eaccc1Affected
1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before cb153bdc1812a3375639ed6ca5f147eaefb65349Affected
1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 36d32cfb00d42e865396424bb5d340fc0a28870dAffected
1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before 0df2e03e4620548b41891b4e0d1bd9d2e0d8a39aAffected
1e2fd202f8593985cdadca32e0c322f98e7fe7cb to before de203da734fae00e75be50220ba5391e7beecdf9Affected

LinuxLinux

4.16Affected
before 4.16Not affected
5.4.292 through 5.4.*Not affected
5.10.236 through 5.10.*Not affected
5.15.180 through 5.15.*Not affected
6.1.134 through 6.1.*Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.