CVE-2023-53705 — Out-of-bounds Read in Linux
Severity
7.3HIGH
No vectorEPSS
0.0%
top 88.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 22
Description
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix out-of-bounds access in ipv6_find_tlv()
optlen is fetched without checking whether there is more than one byte to parse.
It can lead to out-of-bounds access.
Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.
Affected Packages4 packages
▶CVEListV5linux/linuxc61a404325093250b676f40ad8f4dd00f3bcab5f — 59e656d0d4a84ea0ee9a39c6f69160a3effccc94+8
🔴Vulnerability Details
3OSV▶
CVE-2023-53705: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checki↗2025-10-22
GHSA▶
GHSA-27mw-8p8v-6j5h: In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix out-of-bounds access in ipv6_find_tlv()
optlen is fetched without chec↗2025-10-22