CVE-2023-53479
In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() KASAN and KFENCE detected an user-after-free in the CXL driver. This happen...
Affects 1 product across 1 vendor.
Software references memory after it has been freed, leading to corruption, crashes, or code execution.
A use-after-free vulnerability was identified in the CXL driver of the Linux kernel, specifically in the cxl_parse_cfmws() function. This issue could potentially allow an attacker to exploit the kernel and gain elevated privileges.
BSID: BS-2025-GLOBAL-176595-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2023-53479?
What is the CVSS score for CVE-2023-53479?
Is CVE-2023-53479 actively exploited?
How do I remediate CVE-2023-53479?
What systems are affected by CVE-2023-53479?
| CVE ID | CVE-2023-53479 |
|---|---|
| BSID | BS-2025-GLOBAL-176595-H BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Published | 2025-10-01 |
| Last Modified | 2026-01-20 |
| ICS Relevance | 0% |
| Weakness (CWE) | |
| Source | NVD |
In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() KASAN and KFENCE detected an user-after-free in the CXL driver. This happens in the cxl_decoder_add() fail path. KASAN prints the following error: BUG: KASAN: slab-use-after-free in cxl_parse_cfmws (drivers/cxl/acpi.c:299) This happens in cxl_parse_cfmws(), where put_device() is called, releasing cxld, which is accessed later. Use the local variables in the dev_err() instead of pointing to the released memory. Since the dev_err() is printing a resource, change the open coded print format to use the %pr format specifier.
Source: NIST NVD / MITRE CVE Database
The vulnerability occurs in the cxl_decoder_add() fail path, where a device is freed but still referenced in cxl_parse_cfmws(). This could be exploited by an attacker with local access to the system to execute arbitrary code in kernel space.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| Linux | Linux Kernel | 6.5 ≥ 6.0, < 6.1.43 ≥ 6.2, < 6.4.8 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | f374f3b90632e2ac42a263db36ac7703dcadc6e839ba1dd05ebfaccc3fae2c511d2d19ce61138104585c2bb1def55fc4a2e04fd4dbe89ce684e443c8cfdbc1d7 |
ICS/OT Vulnerability Intelligence for Your Environment
BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.
Create a free account →