In the Linux kernel, the following vulnerability has been resolved:

x86/MCE/AMD: Use an u64 for bank_map

Thee maximum number of MCA banks is 64 (MAX_NR_BANKS), see

a0bc32b3cacf ("x86/mce: Increase maximum number of banks to 64").

However, the bank_map which contains a bitfield of which banks to
initialize is of type unsigned int and that overflows when those bit
numbers are >= 32, leading to UBSAN complaining correctly:

UBSAN: shift-out-of-bounds in arch/x86/kernel/cpu/mce/amd.c:1365:38
shift exponent 32 is too large for 32-bit type 'int'

Change the bank_map to a u64 and use the proper BIT_ULL() macro when
modifying bits in there.

[ bp: Rewrite commit message. ]

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00023.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
a0bc32b3cacf194dc479b342f006203fd1e1941a affected < a9b9ea0e63a0ec5e97bf1219ab6dcbd55e362f83
a0bc32b3cacf194dc479b342f006203fd1e1941a affected < 11c58a0c1937c157dbdf82d5ab634d68c99f3098
a0bc32b3cacf194dc479b342f006203fd1e1941a affected < ba8ffb1251eb629c2ec35220e3896cf4f7b888a7
a0bc32b3cacf194dc479b342f006203fd1e1941a affected < 9669fa17287c3af2bbd4868d4c8fdd9e57f8332e
a0bc32b3cacf194dc479b342f006203fd1e1941a affected < 67bb7521b6420d81dab7538c0686f18f7d6d09f4
a0bc32b3cacf194dc479b342f006203fd1e1941a affected < 4c1cdec319b9aadb65737c3eb1f5cb74bd6aa156
Linux Linux affected
Version Status Constraints
5.10 affected —
0 unaffected < 5.10
5.10.180 unaffected ≤ 5.10.*
5.15.111 unaffected ≤ 5.15.*
6.1.28 unaffected ≤ 6.1.*
6.2.15 unaffected ≤ 6.2.*
6.3.2 unaffected ≤ 6.3.*
6.4 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/11c58a0c1937c157dbdf82d5ab634d68c99f3098 cve-icon cve-icon
https://git.kernel.org/stable/c/4c1cdec319b9aadb65737c3eb1f5cb74bd6aa156 cve-icon cve-icon
https://git.kernel.org/stable/c/67bb7521b6420d81dab7538c0686f18f7d6d09f4 cve-icon cve-icon
https://git.kernel.org/stable/c/9669fa17287c3af2bbd4868d4c8fdd9e57f8332e cve-icon cve-icon
https://git.kernel.org/stable/c/a9b9ea0e63a0ec5e97bf1219ab6dcbd55e362f83 cve-icon cve-icon
https://git.kernel.org/stable/c/ba8ffb1251eb629c2ec35220e3896cf4f7b888a7 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100110-CVE-2023-53474-b2ae@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53474 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53474 cve-icon
History

Tue, 20 Jan 2026 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-190
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Thu, 02 Oct 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 02 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Wed, 01 Oct 2025 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Use an u64 for bank_map Thee maximum number of MCA banks is 64 (MAX_NR_BANKS), see a0bc32b3cacf ("x86/mce: Increase maximum number of banks to 64"). However, the bank_map which contains a bitfield of which banks to initialize is of type unsigned int and that overflows when those bit numbers are >= 32, leading to UBSAN complaining correctly: UBSAN: shift-out-of-bounds in arch/x86/kernel/cpu/mce/amd.c:1365:38 shift exponent 32 is too large for 32-bit type 'int' Change the bank_map to a u64 and use the proper BIT_ULL() macro when modifying bits in there. [ bp: Rewrite commit message. ]
Title x86/MCE/AMD: Use an u64 for bank_map
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-10-01T11:42:43.798Z

Reserved: 2025-10-01T11:39:39.401Z

Link: CVE-2023-53474

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-10-01T12:15:49.687

Modified: 2026-01-20T16:55:02.000

Link: CVE-2023-53474

cve-icon Redhat

Severity : Important

Publid Date: 2025-10-01T00:00:00Z

Links: CVE-2023-53474 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-02T08:39:55Z

Weaknesses