Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.1
CVE-2023-53495: Linux kernel Ethernet driver may write beyond memory
CVE-2023-53495 · published 1 year ago
Summary
The Ethernet driver in the Linux kernel could write past the intended memory area when handling certain network settings, potentially causing a crash or other unexpected behavior. This occurs because the driver does not verify the size of data supplied by user programs. Updating the kernel to the latest version that includes the fix will prevent the issue.
What to do
- Update linux kernel to version 6.5.4.
- Update canonical linux-aws-5.4 to version 5.4.0-1116.126~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1121.128~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1120.129~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-169.187~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1063.68~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1115.124~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1100.112~18.04.1.
- Update canonical linux to version 5.4.0-169.187.
- Update canonical linux-aws to version 5.4.0-1116.126.
- Update canonical linux-aws-5.15 to version 5.15.0-1053.58~20.04.1.
- Update canonical linux-azure to version 5.4.0-1121.128.
- Update canonical linux-azure-5.15 to version 5.15.0-1056.64~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1076.82.
- Update canonical linux-gcp to version 5.4.0-1120.129.
- Update canonical linux-gcp-5.15 to version 5.15.0-1051.59~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-94.104~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1063.68.
- Update canonical linux-ibm-5.15 to version 5.15.0-1046.49~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1048.54~20.04.1.
- Update canonical linux-iot to version 5.4.0-1028.29.
- Update canonical linux-kvm to version 5.4.0-1104.111.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-94.104~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1022.22~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1115.124.
- Update canonical linux-oracle-5.15 to version 5.15.0-1051.57~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1100.112.
- Update canonical linux-riscv-5.15 to version 5.15.0-1049.53~20.04.2.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1035.39.
- Update canonical linux-aws-fips to version 5.4.0-1116.126+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1121.128+fips1.
- Update canonical linux-fips to version 5.4.0-1090.100.
- Update canonical linux-gcp-fips to version 5.4.0-1120.129+fips1.
- Update canonical linux to version 5.15.0-94.104.
- Update canonical linux-aws to version 5.15.0-1053.58.
- Update canonical linux-azure to version 5.15.0-1056.64.
- Update canonical linux-gcp to version 5.15.0-1051.59.
- Update canonical linux-gke to version 5.15.0-1050.55.
- Update canonical linux-gkeop to version 5.15.0-1036.42.
- Update canonical linux-ibm to version 5.15.0-1046.49.
- Update canonical linux-intel-iotg to version 5.15.0-1047.53.
- Update canonical linux-kvm to version 5.15.0-1050.55.
- Update canonical linux-lowlatency to version 5.15.0-94.104.
- Update canonical linux-nvidia to version 5.15.0-1044.44.
- Update canonical linux-nvidia-tegra to version 5.15.0-1022.22.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1009.9.
- Update canonical linux-oracle to version 5.15.0-1051.57.
- Update canonical linux-raspi to version 5.15.0-1046.49.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1027.31.
- Update canonical linux-bluefield to version 5.15.0-1035.37.
- Update canonical linux-aws-fips to version 5.15.0-1053.58+fips1.
- Update canonical linux-fips to version 5.15.0-94.104+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1055.63+fips2.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1046.48.
- Update canonical linux-realtime to version 5.15.0-1054.60.
- Update debian linux to version 6.1.55-1.
- Update debian linux to version 6.5.6-1.
- Update canonical linux-azure-fde to version 5.15.0-1056.64.1.
- Update linux linux to version ba6673824efa3dc198b04a54e69dce480066d7d9 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.2, < 5.4.257 >= 5.5, < 5.10.195 >= 5.11, < 5.15.132 >= 5.16, < 6.1.54 >= 6.2, < 6.5.4 6.6 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | linux | linux |
< ba6673824efa3dc198b04a54e69dce480066d7d9 5.2 |
| Linux | linux | kernel |
>= 6.2.0, < 6.5.4 Fix: upgrade to 6.5.4
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1116.126~18.04.1 Fix: upgrade to 5.4.0-1116.126~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1121.128~18.04.1 Fix: upgrade to 5.4.0-1121.128~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1120.129~18.04.1 Fix: upgrade to 5.4.0-1120.129~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-169.187~18.04.1 Fix: upgrade to 5.4.0-169.187~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1063.68~18.04.1 Fix: upgrade to 5.4.0-1063.68~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1115.124~18.04.1 Fix: upgrade to 5.4.0-1115.124~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1100.112~18.04.1 Fix: upgrade to 5.4.0-1100.112~18.04.1
|
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-169.187 Fix: upgrade to 5.4.0-169.187
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1116.126 Fix: upgrade to 5.4.0-1116.126
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1053.58~20.04.1 Fix: upgrade to 5.15.0-1053.58~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1121.128 Fix: upgrade to 5.4.0-1121.128
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1056.64~20.04.1 Fix: upgrade to 5.15.0-1056.64~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1076.82 Fix: upgrade to 5.4.0-1076.82
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1120.129 Fix: upgrade to 5.4.0-1120.129
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1051.59~20.04.1 Fix: upgrade to 5.15.0-1051.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-94.104~20.04.1 Fix: upgrade to 5.15.0-94.104~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1063.68 Fix: upgrade to 5.4.0-1063.68
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1046.49~20.04.1 Fix: upgrade to 5.15.0-1046.49~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1048.54~20.04.1 Fix: upgrade to 5.15.0-1048.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1028.29 Fix: upgrade to 5.4.0-1028.29
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1104.111 Fix: upgrade to 5.4.0-1104.111
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-94.104~20.04.1 Fix: upgrade to 5.15.0-94.104~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1022.22~20.04.1 Fix: upgrade to 5.15.0-1022.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1115.124 Fix: upgrade to 5.4.0-1115.124
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1051.57~20.04.1 Fix: upgrade to 5.15.0-1051.57~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1100.112 Fix: upgrade to 5.4.0-1100.112
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1049.53~20.04.2 Fix: upgrade to 5.15.0-1049.53~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1035.39 Fix: upgrade to 5.4.0-1035.39
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
Showing 50 of 159. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1116.126+fips1 Fix: upgrade to 5.4.0-1116.126+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1121.128+fips1 Fix: upgrade to 5.4.0-1121.128+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1090.100 Fix: upgrade to 5.4.0-1090.100
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1120.129+fips1 Fix: upgrade to 5.4.0-1120.129+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-94.104 Fix: upgrade to 5.15.0-94.104
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1053.58 Fix: upgrade to 5.15.0-1053.58
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1056.64 Fix: upgrade to 5.15.0-1056.64
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1056.64.1 Fix: upgrade to 5.15.0-1056.64.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1051.59 Fix: upgrade to 5.15.0-1051.59
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1036.42 Fix: upgrade to 5.15.0-1036.42
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1046.49 Fix: upgrade to 5.15.0-1046.49
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1047.53 Fix: upgrade to 5.15.0-1047.53
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-94.104 Fix: upgrade to 5.15.0-94.104
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1044.44 Fix: upgrade to 5.15.0-1044.44
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1022.22 Fix: upgrade to 5.15.0-1022.22
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1009.9 Fix: upgrade to 5.15.0-1009.9
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1051.57 Fix: upgrade to 5.15.0-1051.57
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1046.49 Fix: upgrade to 5.15.0-1046.49
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1035.37 Fix: upgrade to 5.15.0-1035.37
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1053.58+fips1 Fix: upgrade to 5.15.0-1053.58+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-94.104+fips1 Fix: upgrade to 5.15.0-94.104+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1055.63+fips2 Fix: upgrade to 5.15.0-1055.63+fips2
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1046.48 Fix: upgrade to 5.15.0-1046.48
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1054.60 Fix: upgrade to 5.15.0-1054.60
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Debian:12 | debian | linux |
< 6.1.55-1 Fix: upgrade to 6.1.55-1
|
| Debian:13 | debian | linux |
< 6.5.6-1 Fix: upgrade to 6.5.6-1
|
Original advisory text
net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() rules is allocated in ethtool_get_rxnfc and the size is determined by rule_cnt from user space. So rule_cnt needs to be check before using rules to avoid OOB writing or NULL pointer dereference.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53495... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53495 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-53495 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/linus/51fe0a470543f345e3c62b6798929de3ddcedc1d Third Party Advisory
- https://ubuntu.com/security/CVE-2023-53495 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-53495 Third Party Advisory
- https://git.kernel.org/stable/c/349638f7e5d3c7d328565587bb7b0454bbee02e2 Third Party Advisory
- https://git.kernel.org/stable/c/51fe0a470543f345e3c62b6798929de3ddcedc1d Third Party Advisory
- https://git.kernel.org/stable/c/5bb09dddc724c5f7c4dc6dd3bfebd685eecd93e8 Third Party Advisory
- https://git.kernel.org/stable/c/61054a8ddb176b155a8f2bacdfefb3727187f5d9 Third Party Advisory
- https://git.kernel.org/stable/c/625b70d31dd4df4b96b3ddcbe251debb33bd67f5 Third Party Advisory
- https://git.kernel.org/stable/c/ba6673824efa3dc198b04a54e69dce480066d7d9 Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
7.1
High
Type
CWE-787Out-of-bounds Write
Timeline
Published1 Oct 2025
Updated3 Nov 2026
First seen7 Mar 2026
Sources
CVE-2023-53495 · OSV
CVE-2023-53495 · NVD
CVE-2023-53495 · MITRE
UBUNTU-CVE-2023-53495 · OSV
DEBIAN-CVE-2023-53495 · OSV
Track software like this
Free during beta