CVE-2023-53513 — Uncontrolled Recursion in Linux

CWE-674 — Uncontrolled RecursionCWE-190 — Integer Overflow or Wraparound5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 1

Description

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbd_ioctl arg without verification. The UBSAN warning calltrace like below: UBSAN: Undefined behaviour in fs/buffer.c:1709:35 signed integer overflow: -9223372036854775808 - 1 cannot be represented in type 'long long int' CPU: 3 PID: 2523 Comm: syz-executor.0 Not tainted 4.19.90 #1 Hardware name: linux,dummy-virt (DT) Call trace: dump_backtrace…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDlinux/linux_kernel4.1 — 5.15.113+2
▶Debianlinux/linux_kernel< 6.1.37-1+2
▶CVEListV5linux/linuxb9c495bb6d8edc719fd23af2ac67de8303cfc1e8 — 52851d0c3354b397c11d31dfeb8b2a2fc85a0002+4
▶debiandebian/linux< linux 6.1.37-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-jvcg-848p-wjgf: In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused↗2025-10-01
▶
OSV
CVE-2023-53513: In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by↗2025-10-01
▶

📋Vendor Advisories

2
Red Hat
kernel: nbd: fix incomplete validation of ioctl arg↗2025-10-01
▶
Debian
CVE-2023-53513: linux - In the Linux kernel, the following vulnerability has been resolved: nbd: fix in...↗2023
▶