CVE-2023-53797

HID: wacom: Use ktime_t rather than int when dealing with timestamps

State: Published
Severity: 7.1 High
Published: Dec 9, 2025
Updated: Aug 5, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: Use ktime_t rather than int when dealing with timestamps

Code which interacts with timestamps needs to use the ktime_t type returned by functions like ktime_get. The int type does not offer enough space to store these values, and attempting to use it is a recipe for problems. In this particular case, overflows would occur when calculating/storing timestamps leading to incorrect values being reported to userspace. In some cases these bad timestamps cause input handling in userspace to appear hung.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f9e27d4bdb1fe257c1453d02560e3adc3e5b6023 to before 99036f1aed7e82773904f5d91a9897bb3e507fd9Affected 4502ebbdc0e21e44a8a706428e420ae9c1bb9bba to before 9598a647ecc8f300b0540abf9d3b3439859d163bAffected 5047a228d4c8e2b5d1b856f21a00ecf717945a9c to before 67ce7724637c6adb66f788677cb50b82615de0acAffected fb98336e23c11e9c8c7dd5425ec71adbbef7f773 to before d89750b19681581796dfbe3689bbb5d439b99b24Affected 694d3e4387bfa69925e075053894385351106e64 to before bdeaa883b765709f231f47f9d6cc76c837a15396Affected 17d793f3ed53080dab6bbeabfc82de890c901001 to before d0198363f9108e4adb2511e607ba91e44779e8b1Affected 17d793f3ed53080dab6bbeabfc82de890c901001 to before 9a6c0e28e215535b2938c61ded54603b4e5814c5Affected 82a136c35506dc788a6c03ffeb11b10c907b0e26Affected 5.4.243 to before 5.4.251Affected 5.10.180 to before 5.10.188Affected 5.15.112 to before 5.15.120Affected 6.1.29 to before 6.1.37Affected 6.3.3 to before 6.3.11Affected 6.2.16 to before 6.3Affected
LinuxLinux	6.4Affected before 6.4Not affected 5.4.251 through 5.4.Not affected 5.10.188 through 5.10.Not affected 5.15.120 through 5.15.Not affected 6.1.37 through 6.1.Not affected 6.3.11 through 6.3.Not affected 6.4.1 through 6.4.Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

f9e27d4bdb1fe257c1453d02560e3adc3e5b6023 to before 99036f1aed7e82773904f5d91a9897bb3e507fd9Affected
4502ebbdc0e21e44a8a706428e420ae9c1bb9bba to before 9598a647ecc8f300b0540abf9d3b3439859d163bAffected
5047a228d4c8e2b5d1b856f21a00ecf717945a9c to before 67ce7724637c6adb66f788677cb50b82615de0acAffected
fb98336e23c11e9c8c7dd5425ec71adbbef7f773 to before d89750b19681581796dfbe3689bbb5d439b99b24Affected
694d3e4387bfa69925e075053894385351106e64 to before bdeaa883b765709f231f47f9d6cc76c837a15396Affected
17d793f3ed53080dab6bbeabfc82de890c901001 to before d0198363f9108e4adb2511e607ba91e44779e8b1Affected
17d793f3ed53080dab6bbeabfc82de890c901001 to before 9a6c0e28e215535b2938c61ded54603b4e5814c5Affected
82a136c35506dc788a6c03ffeb11b10c907b0e26Affected
5.4.243 to before 5.4.251Affected
5.10.180 to before 5.10.188Affected
5.15.112 to before 5.15.120Affected
6.1.29 to before 6.1.37Affected
6.3.3 to before 6.3.11Affected
6.2.16 to before 6.3Affected

LinuxLinux

6.4Affected
before 6.4Not affected
5.4.251 through 5.4.*Not affected
5.10.188 through 5.10.*Not affected
5.15.120 through 5.15.*Not affected
6.1.37 through 6.1.*Not affected
6.3.11 through 6.3.*Not affected
6.4.1 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.