CVE-2023-53705

HighCVSS 8.2/10Last modified Oct 28, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access.

Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= c61a404325093250b676f40ad8f4dd00f3bcab5f, < 59e656d0d4a84ea0ee9a39c6f69160a3effccc94; >= c61a404325093250b676f40ad8f4dd00f3bcab5f, < 04bf69e3de435d793a203aacc4b774f8f9f2baeb; >= c61a404325093250b676f40ad8f4dd00f3bcab5f, < 011f47c8b8389154f996f5f69da8efc3a3beefef; >= c61a404325093250b676f40ad8f4dd00f3bcab5f, < e5f82688ae10f5f386952e65e941bb8868ee54dc; >= c61a404325093250b676f40ad8f4dd00f3bcab5f, < 9b92e2d0eb696d7586ba832c8854653b59887da0; >= c61a404325093250b676f40ad8f4dd00f3bcab5f, < 91dd8aab9c9f193210681b86b6b92840ffe74f0c; >= c61a404325093250b676f40ad8f4dd00f3bcab5f, < ae68c0f7edbc9a294094ce03a0aaf45aa489ce40; >= c61a404325093250b676f40ad8f4dd00f3bcab5f, < 878ecb0897f4737a4c9401f3523fd49589025671
LinuxLinux2.6.19

References

Timeline

Published
Oct 22, 2025
Last modified
Oct 28, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-53706In the Linux kernel, the following vulnerability has been resolved: mm/vmemmap/devdax: fix kernel crash when probing devdax devices commitCVE-2023-537077.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 The type of size iCVE-2023-53708In the Linux kernel, the following vulnerability has been resolved: ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects If a badlyCVE-2023-53709In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Handle race between rb_move_tail and rb_check_pages It seCVE-2023-53716.5RTPS dissector memory leak in Wireshark 4.0.0 to 4.0.8 and 3.6.0 to 3.6.16 allows denial of service via packet injection or crafted capture CVE-2023-53710In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read KerneCVE-2023-537118.2In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential data corruption We must ensure that the subrequesCVE-2023-53712In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triCVE-2023-537137.8In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode CVE-2023-53714In the Linux kernel, the following vulnerability has been resolved: drm/stm: ltdc: fix late dereference check In ltdc_crtc_set_crc_source(CVE-2023-53715In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex AppareCVE-2023-53716In the Linux kernel, the following vulnerability has been resolved: net: fix skb leak in __skb_tstamp_tx() Commit 50749f2dd685 ("tcp/udp:
CVE-2023-53705: High severity, CVSS 8.2 | Vulnix