CVE-2023-52488: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO

Published Feb 29, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

serial: sc16is7xx: convert from raw to noinc regmap functions for FIFO

The SC16IS7XX IC supports a burst mode to access the FIFOs where the initial register address is sent ($00), followed by all the FIFO data without having to resend the register address each time. In this mode, the IC doesn't increment the register address for each R/W byte.

The regmaprawread() and regmaprawwrite() are functions which can perform IO over multiple registers. They are currently used to read/write from/to the FIFO, and although they operate correctly in this burst mode on the SPI bus, they would corrupt the regmap cache if it was not disabled manually. The reason is that when the R/W size is more than 1 byte, these functions assume that the register address is incremented and handle the cache accordingly.

Convert FIFO R/W functions to use the regmap noinc versions in order to remove the manual cache control which was a workaround when using the raw versions. FIFO registers are properly declared as volatile so cache will not be used/updated for FIFO accesses.

Affected Software

7 affected componentsFixes available
Linux Linux kernel>=3.16<6.1.76
Linux Linux kernel>=6.2<6.6.15
Linux Linux kernel>=6.7<6.7.3
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
Microsoft cbl2 kernel 5.15.182.1-1
Microsoft cbl2 kernel 5.15.182.1-1
Microsoft cbl2 kernel 5.15.176.3-1

Event History

Feb 29, 2024
CVE Published
via MITRE·03:52 PM
Data Sourced
via MITRE·03:52 PM
Description
May 11, 2024
Data Sourced
via Launchpad·04:29 PM
Description
Apr 28, 2025
Data Sourced
via Ubuntu·05:01 AM
RemedyDescriptionSeverityAffected Software
Sep 4, 2025
Data Sourced
via Microsoft·05:09 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·05:09 AM
Affected Software
Updated
via Microsoft·05:09 AM
Affected Software
Updated
via Microsoft·05:09 AM
SeverityAffected Software
Updated
via Microsoft·05:09 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2023-52488?

CVE-2023-52488 is classified as a low-severity vulnerability in the Linux kernel.

2

How do I fix CVE-2023-52488?

To resolve CVE-2023-52488, you should update to the patched versions of the Linux package, specifically 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.

3

What software is affected by CVE-2023-52488?

CVE-2023-52488 affects the Linux kernel versions prior to the fixed releases mentioned in the vulnerability details.

4

Is CVE-2023-52488 being actively exploited?

There have been no widespread reports of active exploitation regarding CVE-2023-52488.

5

What is the nature of CVE-2023-52488?

CVE-2023-52488 involves a conversion issue in the serial driver for the SC16IS7XX IC in the Linux kernel.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203