CVE-2023-53376

CVE-2023-53376 is a memory access vulnerability in the Linux kernel's mpi3mr driver, specifically affecting how bitmap sizes are managed. The driver incorrectly calculates bitmap sizes in bytes, leading to out-of-bounds memory access when using bitmap helper functions that expect sizes in unsigned long units. This flaw, observed during firmware download to eHBA-9600, can result in a kernel crash (KASAN slab-out-of-bounds error). Rated with a CVSS score of 7.1 (HIGH), the vulnerability has a local attack vector and low attack complexity, allowing a low-privileged attacker to achieve high confidentiality and availability impacts. The primary impact is a denial of service due to system instability, with potential for information disclosure. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, indicating a low level of public attention.