Database/Control plane, storage & DevOps
Linux HID/amd_sfh - shift out of bounds: A shift operation in the AMD Sensor Fusion Hub driver exceeds the maximum
CVE-2023-53703Control plane, storage & DevOpscurated
Impact
A shift operation in the AMD Sensor Fusion Hub driver exceeds the maximum valid shift value, producing undefined behaviour in the kernel. Same story as the SFH use-after-free: low real exposure on a server, and a good reminder that unused autoloading drivers cost you something.
Who can reach it
Local, on hosts with amd_sfh loaded.
What to do
Distro kernel update plus reboot, or blacklist the module on server images and carry neither the bug nor the next one.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.