CVE-2023-52987
HIGHLinux Kernel < 6.1.11 - Improper Array Index Validation
Title source: ruleDescription
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() The "id" comes from the user. Change the type to unsigned to prevent an array underflow.
Scores
CVSS v3
7.8
EPSS
0.0008
EPSS Percentile
22.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-129
Status
published
Products (2)
linux/linux_kernel
6.2 rc1 (6 CPE variants)
linux/linux_kernel
6.1 - 6.1.11
Published
Mar 27, 2025
Tracked Since
Feb 18, 2026