CVE-2023-53535Out-of-bounds Write in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized packets from the hardware which exceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early check which drops the packet to avoid invoking skb_over_panic() and move on to processing the next packet.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel3.154.14.308+6
Debianlinux/linux_kernel< 5.10.178-1+3
CVEListV5linux/linux1c1008c793fa46703a2fee469f4235e1c79843337cdb07e10c1258c08f31b24898930e4ece88d163+8
debiandebian/linux< linux 6.1.20-1 (bookworm)

Patches

🔴Vulnerability Details

2
GHSA
GHSA-wh7j-wv38-gcf6: In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversiz2025-10-04
OSV
CVE-2023-53535: In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized2025-10-04

📋Vendor Advisories

2
Red Hat
kernel: net: bcmgenet: Add a check for oversized packets2025-10-04
Debian
CVE-2023-53535: linux - In the Linux kernel, the following vulnerability has been resolved: net: bcmgen...2023