Security readout for executives and security teams
Plain-English summary
This is a Linux kernel ACPI interpreter bug where a Timer instruction can be handled incorrectly, causing an out-of-bounds array access. Because it is in kernel code, successful abuse could be serious, but the provided evidence shows a local trigger and a sanitizer crash report, not confirmed real-world exploitation.
Executive priority
Treat as a high-priority kernel maintenance item, especially for shared Linux systems where local users or workloads are not fully trusted. There is no evidence of active exploitation in the bundle, so urgency should focus on patching cadence and exposure to local users.
Technical view
ACPICA interpreted ASL Timer as though an operand needed resolving, leading to index -1 access in acpica/dswexec.c. The fix adds AML_NO_OPERAND_RESOLVE to the Timer opcode. The CVSS vector is local, low complexity, low privilege, no user interaction, with high confidentiality, integrity, and availability impact.
Likely exposure
Exposure is limited to systems running affected Linux kernel versions or downstream kernels missing the referenced stable commits. Systems using ACPI paths such as acpi_power_meter may be more relevant, but the bundle does not define a complete hardware or distribution-specific exposure list.
Exploitation context
The CVSS vector requires local low-privileged access and no user interaction. CISA KEV status is false in the bundle, and no cited source claims active exploitation. The available evidence is a UBSAN out-of-bounds report during ACPI method evaluation.
Researcher notes
The source bundle supports the root cause and fix direction, but not a proven privilege escalation path. Avoid assuming affected distributions without advisory confirmation. The observed stack involves acpi_power_meter and acpi_evaluate_integer, which may help guide targeted validation.
Mitigation direction
- Apply vendor Linux kernel updates containing the referenced stable fixes.
- Check your distribution advisory for the exact fixed kernel package.
- Prioritize internet-facing multi-user hosts and shared compute environments.
- Track downstream kernel backports rather than relying only on upstream version numbers.
Validation and detection
- Inventory Linux kernel versions across servers, appliances, and images.
- Compare installed kernels with vendor advisories and referenced stable commits.
- Review logs for ACPI or UBSAN out-of-bounds reports in dswexec.c.
- Confirm patched hosts boot the intended updated kernel.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-129: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-53395 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/2f2a5905303ae230b5159fcd8cdcd5b3e7ad5e2dCVE reference, Linux
- https://git.kernel.org/stable/c/23c67fa615c52712bfa02a6dfadbd4656c87c066CVE reference, Linux
- https://git.kernel.org/stable/c/3bf4463e40a17a23f2f261dfd7fe23129bdd04a4CVE reference, Linux
- https://git.kernel.org/stable/c/625c12dc04a607b79f180ef3ee5a12bf2e3324c0CVE reference, Linux
- https://git.kernel.org/stable/c/430787056dd3c591eb553d5c3b2717efcf307d4eCVE reference, Linux
- https://git.kernel.org/stable/c/e1f686930ee4b059c7baa3c3904b2401829f2589CVE reference, Linux
- https://git.kernel.org/stable/c/b102113469487b460e9e77fe9e00d49c50fe8c86CVE reference, Linux
- https://git.kernel.org/stable/c/3a21ffdbc825e0919db9da0e27ee5ff2cc8a863eCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Validation of Array Index
Improper Validation of Array Index represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.