CVE-2023-53073

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-05-02 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' (which contains the unhandled overflow bits) is not being properly masked in some cases, displaying the following warning: WARNING: CPU: 156 PID: 475601 at arch/x86/events/amd/core.c:972 amd_pmu_v2_handle_irq+0x216/0x270 This seems to be happening because the loop is being continued before the status bit being unset, in case x86_perf_event_set_period() returns 0. This is also causing an inconsistency because the "handled" counter is incremented, but the status bit is not cleaned. Move the bit cleaning together above, together when the "handled" counter is incremented.

Affected Software (8)

VendorProductVersion
Linux Linux 7685665c390dc68c2d9a74e8445f41494cc8f6cf < ab33a8f7649b0324639a336e1081aaea51a4523e
Linux Linux 7685665c390dc68c2d9a74e8445f41494cc8f6cf < 9d4c7b1f12e101d6d6253092588b127416ddfb6c
Linux Linux 7685665c390dc68c2d9a74e8445f41494cc8f6cf < 263f5ecaf7080513efc248ec739b6d9e00f4129f
Linux Linux 5.19
linux linux_kernel 5.19 – 6.1.22
linux linux_kernel 6.3
linux linux_kernel 6.3
linux linux_kernel 6.3

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.20%
Raw Score 0.001990
Percentile 9.8%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00199
2026-11-05
0.00199

Intelligence Sources

mitre ref →
nvd ref →