{
  "threat_severity" : "Low",
  "public_date" : "2025-10-04T00:00:00Z",
  "bugzilla" : {
    "description" : "kernel: cpufreq: amd-pstate: fix global sysfs attribute type",
    "id" : "2401463",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2401463"
  },
  "cvss3" : {
    "cvss3_base_score" : "5.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-843",
  "details" : [ "In the Linux kernel, the following vulnerability has been resolved:\ncpufreq: amd-pstate: fix global sysfs attribute type\nIn commit 3666062b87ec (\"cpufreq: amd-pstate: move to use bus_get_dev_root()\")\nthe \"amd_pstate\" attributes where moved from a dedicated kobject to the\ncpu root kobject.\nWhile the dedicated kobject expects to contain kobj_attributes the root\nkobject needs device_attributes.\nAs the changed arguments are not used by the callbacks it works most of\nthe time.\nHowever CFI will detect this issue:\n[ 4947.849350] CFI failure at dev_attr_show+0x24/0x60 (target: show_status+0x0/0x70; expected type: 0x8651b1de)\n...\n[ 4947.849409] Call Trace:\n[ 4947.849410]  <TASK>\n[ 4947.849411]  ? __warn+0xcf/0x1c0\n[ 4947.849414]  ? dev_attr_show+0x24/0x60\n[ 4947.849415]  ? report_cfi_failure+0x4e/0x60\n[ 4947.849417]  ? handle_cfi_failure+0x14c/0x1d0\n[ 4947.849419]  ? __cfi_show_status+0x10/0x10\n[ 4947.849420]  ? handle_bug+0x4f/0x90\n[ 4947.849421]  ? exc_invalid_op+0x1a/0x60\n[ 4947.849422]  ? asm_exc_invalid_op+0x1a/0x20\n[ 4947.849424]  ? __cfi_show_status+0x10/0x10\n[ 4947.849425]  ? dev_attr_show+0x24/0x60\n[ 4947.849426]  sysfs_kf_seq_show+0xa6/0x110\n[ 4947.849433]  seq_read_iter+0x16c/0x4b0\n[ 4947.849436]  vfs_read+0x272/0x2d0\n[ 4947.849438]  ksys_read+0x72/0xe0\n[ 4947.849439]  do_syscall_64+0x76/0xb0\n[ 4947.849440]  ? do_user_addr_fault+0x252/0x650\n[ 4947.849442]  ? exc_page_fault+0x7a/0x1b0\n[ 4947.849443]  entry_SYSCALL_64_after_hwframe+0x72/0xdc" ],
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2024-05-22T00:00:00Z",
    "advisory" : "RHSA-2024:3138",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8",
    "package" : "kernel-0:4.18.0-553.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2024-04-30T00:00:00Z",
    "advisory" : "RHSA-2024:2394",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "kernel-0:5.14.0-427.13.1.el9_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2024-04-30T00:00:00Z",
    "advisory" : "RHSA-2024:2394",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9",
    "package" : "kernel-0:5.14.0-427.13.1.el9_4"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2023-53550\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-53550\nhttps://lore.kernel.org/linux-cve-announce/2025100447-CVE-2023-53550-bbac@gregkh/T" ],
  "name" : "CVE-2023-53550",
  "csaw" : false
}