CVE-2023-53342Linux vulnerability

5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 17

Description

In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix handling IPv4 routes with nhid Fix handling IPv4 routes referencing a nexthop via its id by replacing calls to fib_info_nh() with fib_info_nhc(). Trying to add an IPv4 route referencing a nextop via nhid: $ ip link set up swp5 $ ip a a 10.0.0.1/24 dev swp5 $ ip nexthop add dev swp5 id 20 via 10.0.0.2 $ ip route add 10.0.1.0/24 nhid 20 triggers warnings when trying to handle the route: [ 528.8057

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel6.16.1.46+2
Debianlinux/linux_kernel< 6.1.52-1+2
CVEListV5linux/linux396b80cb5cc8006a488ea25ef84fae245dc1b43ca3e5f3b7f25d7b90f3b76d98a946fec6e5f79216+3
debiandebian/linux< linux 6.1.52-1 (bookworm)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-f7c5-8mw5-3gc6: In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix handling IPv4 routes with nhid Fix handling IPv4 rou2025-09-17
OSV
CVE-2023-53342: In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix handling IPv4 routes with nhid Fix handling IPv4 route2025-09-17

📋Vendor Advisories

2
Red Hat
kernel: net: marvell: prestera: fix handling IPv4 routes with nhid2025-09-17
Debian
CVE-2023-53342: linux - In the Linux kernel, the following vulnerability has been resolved: net: marvel...2023
CVE-2023-53342 — Linux vulnerability | cvebase