CVE-2023-53397

modpost: fix off by one in is_executable_section()

State: Published
Severity: 5.5 Medium
Published: Sep 18, 2025
Updated: May 11, 2026
Reserved: Sep 17, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

modpost: fix off by one in is_executable_section()

The > comparison should be >= to prevent an out of bounds array access.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-193 Off-by-one Error

Affected Products

Product	Versions
LinuxLinux	52dc0595d540155436d91811f929bdc8afd6a2a1 to before 7ee557590bac154d324de446d1cd0444988bd511Affected 52dc0595d540155436d91811f929bdc8afd6a2a1 to before 02dc8e8bdbe4412cfcf17ee3873e63fa5a55b957Affected 52dc0595d540155436d91811f929bdc8afd6a2a1 to before cb0cdca5c979bc34c27602e2039562932c2591a4Affected 52dc0595d540155436d91811f929bdc8afd6a2a1 to before 5e0424cd8a44b5f480feb06753cdf4e1f248d148Affected 52dc0595d540155436d91811f929bdc8afd6a2a1 to before dd872d5576cc94528f427c7264c2c438928cc6d2Affected 52dc0595d540155436d91811f929bdc8afd6a2a1 to before cade370efe2f9e2a79ea8587506ffe2b51ac6d2bAffected 52dc0595d540155436d91811f929bdc8afd6a2a1 to before 8b2e77050b91199453bf19d0517b047b7339a9e3Affected 52dc0595d540155436d91811f929bdc8afd6a2a1 to before 3a3f1e573a105328a2cca45a7cfbebabbf5e3192Affected
LinuxLinux	4.1Affected before 4.1Not affected 4.14.322 through 4.14.Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.121 through 5.15.Not affected 6.1.39 through 6.1.Not affected 6.3.13 through 6.3.Not affected 6.4.4 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

52dc0595d540155436d91811f929bdc8afd6a2a1 to before 7ee557590bac154d324de446d1cd0444988bd511Affected
52dc0595d540155436d91811f929bdc8afd6a2a1 to before 02dc8e8bdbe4412cfcf17ee3873e63fa5a55b957Affected
52dc0595d540155436d91811f929bdc8afd6a2a1 to before cb0cdca5c979bc34c27602e2039562932c2591a4Affected
52dc0595d540155436d91811f929bdc8afd6a2a1 to before 5e0424cd8a44b5f480feb06753cdf4e1f248d148Affected
52dc0595d540155436d91811f929bdc8afd6a2a1 to before dd872d5576cc94528f427c7264c2c438928cc6d2Affected
52dc0595d540155436d91811f929bdc8afd6a2a1 to before cade370efe2f9e2a79ea8587506ffe2b51ac6d2bAffected
52dc0595d540155436d91811f929bdc8afd6a2a1 to before 8b2e77050b91199453bf19d0517b047b7339a9e3Affected
52dc0595d540155436d91811f929bdc8afd6a2a1 to before 3a3f1e573a105328a2cca45a7cfbebabbf5e3192Affected

LinuxLinux

4.1Affected
before 4.1Not affected
4.14.322 through 4.14.*Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.121 through 5.15.*Not affected
6.1.39 through 6.1.*Not affected
6.3.13 through 6.3.*Not affected
6.4.4 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.