CVE-2023-53797HID: wacom: Use ktime_t rather than int when dealing with timestamps
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Use ktime_t rather than int when dealing with timestamps Code which interacts with timestamps needs to use the ktime_t type returned by functions like ktime_get. The int type does not offer enough space to store these values, and attempting to use it is a recipe for problems. In this particular case, overflows would occur when calculating/storing timestamps leading to incorrect values being reported to userspace. In some cases these bad timestamps cause input handling in userspace to appear hung.
- CVSS
- 7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Aug 5, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f9e27d4bdb1fe257c1453d02560e3adc3e5b6023 before 99036f1aed7e82773904f5d91a9897bb3e507fd9; from 4502ebbdc0e21e44a8a706428e420ae9c1bb9bba before 9598a647ecc8f300b0540abf9d3b3439859d163b; 5047a228d4c8e2b5d1b856f21a00ecf717945a9c builds before 67ce7724637c6adb66f788677cb50b82615de0ac; from fb98336e23c11e9c8c7dd5425ec71adbbef7f773 before d89750b19681581796dfbe3689bbb5d439b99b24; from 694d3e4387bfa69925e075053894385351106e64 before bdeaa883b765709f231f47f9d6cc76c837a15396; from 17d793f3ed53080dab6bbeabfc82de890c901001 before d0198363f9108e4adb2511e607ba91e44779e8b1; 17d793f3ed53080dab6bbeabfc82de890c901001 builds before 9a6c0e28e215535b2938c61ded54603b4e5814c5; 82a136c35506dc788a6c03ffeb11b10c907b0e26; and 6 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/99036f1aed7e82773904f5d91a9897bb3e507fd9
- https://git.kernel.org/stable/c/9598a647ecc8f300b0540abf9d3b3439859d163b
- https://git.kernel.org/stable/c/67ce7724637c6adb66f788677cb50b82615de0ac
- https://git.kernel.org/stable/c/d89750b19681581796dfbe3689bbb5d439b99b24
- https://git.kernel.org/stable/c/bdeaa883b765709f231f47f9d6cc76c837a15396
- https://git.kernel.org/stable/c/d0198363f9108e4adb2511e607ba91e44779e8b1
- https://git.kernel.org/stable/c/9a6c0e28e215535b2938c61ded54603b4e5814c5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.