Security readout for executives and security teams
Plain-English summary
A local user could trigger a Linux kernel bug in CAN Broadcast Manager handling that may crash or disrupt the system. It was found by syzkaller/KMSAN and fixed by adding error handling around message copy failures. The source bundle does not show remote exposure or active exploitation.
Executive priority
Treat as a routine but real kernel availability risk. It is not currently evidenced as exploited or remotely reachable, but shared Linux systems should receive normal kernel patching priority to reduce local denial-of-service exposure.
Technical view
bcm_tx_setup allocates op->frames and uses memcpy_from_msg. If the copy fails, code could compare an uninitialized len field against constants, triggering a KMSAN uninitialized-value condition via AIO write paths. CVSS 5.5: local, low complexity, low privileges, availability impact only.
Likely exposure
Exposure appears limited to Linux kernels in the cited affected ranges, including versions from 4.8 through 6.3. Practical exposure depends on deployed kernel builds and whether relevant CAN BCM functionality is reachable to local users.
Exploitation context
The bundle reports syzkaller discovery and KMSAN detection, not in-the-wild exploitation. KEV is false. The stated impact is availability only, requiring local access with low privileges and no user interaction.
Researcher notes
The root issue is missing error handling after memcpy_from_msg in bcm_tx_setup, leaving copied frame data potentially uninitialized before len validation. The public evidence supports denial-of-service style availability impact, not confidentiality or integrity compromise.
Mitigation direction
- Update affected Linux kernels to builds containing the referenced stable fixes.
- Use distribution kernel advisories to identify the correct patched package for each system.
- Prioritize multi-user, shared, or untrusted workload hosts first.
- If patch timing is unclear, check vendor guidance for supported temporary mitigations.
Validation and detection
- Inventory Linux kernel versions across servers, workstations, appliances, and containers using host kernels.
- Compare deployed versions with the affected ranges and vendor fixed builds.
- Confirm whether CAN BCM support is present and reachable on exposed hosts.
- Verify patch inclusion through distribution changelogs or the referenced stable commits.
- Record KEV status as not listed, but continue routine monitoring.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-908: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-53344 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H1.83.6CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
5.5MediumVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/3fa0f1e0e31b1b73cdf59d4c36c7242e6ef821beCVE reference, Linux
- https://git.kernel.org/stable/c/618b15d09fed6126356101543451d49860db4388CVE reference, Linux
- https://git.kernel.org/stable/c/78bc7f0ab99458221224d3ab97199c0f8e6861f1CVE reference, Linux
- https://git.kernel.org/stable/c/ab2a55907823f0bca56b6d03ea05e4071ba8535fCVE reference, Linux
- https://git.kernel.org/stable/c/bf70e0eab64c625da84d9fdf4e84466b79418920CVE reference, Linux
- https://git.kernel.org/stable/c/c11dbc7705b3739974ac31a13f4ab81e61a5fb07CVE reference, Linux
- https://git.kernel.org/stable/c/2e6ad51c709fa794e0ce26003c9c9cd944e3383aCVE reference, Linux
- https://git.kernel.org/stable/c/2b4c99f7d9a57ecd644eda9b1fb0a1072414959fCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Use of Uninitialized Resource
Use of Uninitialized Resource represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.