CVE-2023-53797: HID: wacom: Use ktime_t rather than int when dealing with timestamps

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-09 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Use ktime_t rather than int when dealing with timestamps Code which interacts with timestamps needs to use the ktime_t type returned by functions like ktime_get. The int type does not offer enough space to store these values, and attempting to use it is a recipe for problems. In this particular case, overflows would occur when calculating/storing timestamps leading to incorrect values being reported to userspace. In some cases these bad timestamps cause input handling in userspace to appear hung.

Affected products

Linux kernel: from 5.4.243 before 5.4.251; from 5.10.180 before 5.10.188; from 5.15.112 before 5.15.120; from 6.1.29 before 6.1.37; from 6.3.3 before 6.3.11; from 6.2.16 before 6.3 — fixed in 5.10.188, 5.15.120, 5.4.251, 6.1.37, 6.3, 6.3.11

How to fix

Upgrade to a fixed version: Linux kernel 5.10.188, 5.15.120, 5.4.251, 6.1.37. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-53797 or the next vulnerability affects your stack