CVE-2023-53265

CVE-2023-53265 is a slab-out-of-bounds vulnerability in the Linux kernel's UBI (Unsorted Block Images) subsystem. It occurs when the VID header offset plus its size exceeds the allocated memory area, leading to a memory corruption during CRC32 calculations. This flaw affects various versions of the Linux kernel. The vulnerability has a CVSSv3.1 score of 7.1 (High), indicating a local attack vector with low attack complexity, requiring low privileges. A successful exploit could lead to high impact on confidentiality and availability, potentially allowing an attacker to read sensitive kernel memory or cause a system crash. Currently, there is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention from the broader security community.