The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - regmap-irq: Fix out-of-bounds access when allocating config buffers When allocating the 2D array for     handling IRQ type registers in regmap_add_irq_chip_fwnode(), the intent is to allocate a matrix with     num_config_bases rows and num_config_regs columns. This is currently handled by allocating a buffer to     hold a pointer for each row (i.e. num_config_bases). After that, the logic attempts to allocate the memory     required to hold the register configuration for each row. However, instead of doing this allocation for     each row (i.e. num_config_bases allocations), the logic erroneously does this allocation num_config_regs     number of times. This scenario can lead to out-of-bounds accesses when num_config_regs is greater than     num_config_bases. Fix this by updating the terminating condition of the loop that allocates the memory for     holding the register configuration to allocate memory only for each row in the matrix. Amit Pundir     reported a crash that was occurring on his db845c device due to memory corruption (see Closes tag for     Amit's report). The KASAN report below helped narrow it down to this issue: [ 14.033877][ T1]     ================================================================== [ 14.042507][ T1] BUG: KASAN: invalid-     access in regmap_add_irq_chip_fwnode+0x594/0x1364 [ 14.050796][ T1] Write of size 8 at addr     06ffff8081021850 by task init/1 [ 14.242004][ T1] The buggy address belongs to the object at     ffffff8081021850 [ 14.242004][ T1] which belongs to the cache kmalloc-8 of size 8 [ 14.255669][ T1] The     buggy address is located 0 bytes inside of [ 14.255669][ T1] 8-byte region [ffffff8081021850,     ffffff8081021858) (CVE-2023-53768)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2023-53768

medium Nessus Plugin ID 277895

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Dec 17, 2025, 4:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202512171656
Version 1.3 Dec 11, 2025, 12:59 PM CVSS metrics ("CVSSv2 score" set to 4.9. "CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C") CVSSv2 severity (based on CVE-2023-53768, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202512111259
Version 1.1 Dec 10, 2025, 9:29 AM New Plugin Feed: 202512100929