cbcvebase.
CVE-2023-53863
published 2025-12-09

CVE-2023-53863: In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps syzbot reports that some netdev…

PriorityP422low5.5
EPSS
0.24%
14.7th percentile
In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps syzbot reports that some netdev devices do not have a six bytes address [1] Replace ETH_ALEN by dev->addr_len. [1] (Case of a device where dev->addr_len = 4) BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copyout+0xb8/0x100 lib/iov_iter.c:169 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copyout+0xb8/0x100 lib/iov_iter.c:169 _copy_to_iter+0x6d8/0x1d00 lib/iov_iter.c:536 copy_to_iter include/linux/uio.h:206 [inline] simple_copy_to_iter+0x68/0xa0 net/core/datagram.c:513 __skb_datagram_iter+0x123/0xdc0 net/core/datagram.c:419 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:527 skb_copy_datagram_msg include/linux/skbuff.h:3960 [inline] netlink_recvmsg+0x4ae/0x15a0 net/netlink/af_netlink.c:1970 sock_recvmsg_nosec net/socket.c:1019 [inline] sock_recvmsg net/socket.c:1040 [inline] ____sys_recvmsg+0x283/0x7f0 net/socket.c:2722 ___sys_recvmsg+0x223/0x840 net/socket.c:2764 do_recvmmsg+0x4f9/0xfd0 net/socket.c:2858 __sys_recvmmsg net/socket.c:2937 [inline] __do_sys_recvmmsg net/socket.c:2960 [inline] __se_sys_recvmmsg net/socket.c:2953 [inline] __x64_sys_recvmmsg+0x397/0x490 net/socket.c:2953 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd Uninit was stored to memory at: __nla_put lib/nlattr.c:1009 [inline] nla_put+0x1c6/0x230 lib/nlattr.c:1067 nlmsg_populate_fdb_fill+0x2b8/0x600 net/core/rtnetlink.c:4071 nlmsg_populate_fdb net/core/rtnetlink.c:4418 [inline] ndo_dflt_fdb_dump+0x616/0x840 net/core/rtnetlink.c:4456 rtnl_fdb_dump+0x14ff/0x1fc0 net/core/rtnetlink.c:4629 netlink_dump+0x9d1/0x1310 net/netlink/af_netlink.c:2268 netlink_recvmsg+0xc5c/0x15a0 net/netlink/af_netlink.c:1995 sock_recvmsg_nosec+0x7a/0x120 net/socket.c:1019 ____sys_recvmsg+0x664

Affected

23 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.52-1 (bookworm)linux 6.1.52-1 (bookworm)
linuxlinux——
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < 61d1bf3c34bf5fe936c50d1a4bc460babcc85e8861d1bf3c34bf5fe936c50d1a4bc460babcc85e88
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < c3ad49ff5c030cbe719fc4cb0ae081b8255ef4b3c3ad49ff5c030cbe719fc4cb0ae081b8255ef4b3
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < bd1de6107f10e7d4c2aabe3397b58d63672fc511bd1de6107f10e7d4c2aabe3397b58d63672fc511
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < 44db85c6e1a184b99a2cdf56b525ac63c4962c2244db85c6e1a184b99a2cdf56b525ac63c4962c22
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < 619384319b137908d1008c92426c9daa95c06b90619384319b137908d1008c92426c9daa95c06b90
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < e9331c8fa4c69f09d2c71682af75586f77266e81e9331c8fa4c69f09d2c71682af75586f77266e81
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < b6f2d4618fc697886ad41e215ae20638153e42d0b6f2d4618fc697886ad41e215ae20638153e42d0
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < 73862118bd9dec850aa8e775145647ddd23aedf873862118bd9dec850aa8e775145647ddd23aedf8
linuxlinux>= d83b060360485454fcd6870340ec01d6f96f2295 < aa5406950726e336c5c9585b09799a734b6e77bfaa5406950726e336c5c9585b09799a734b6e77bf
linuxlinux_kernel>= 0 < 5.10.191-15.10.191-1
linuxlinux_kernel>= 0 < 6.1.52-16.1.52-1
linuxlinux_kernel>= 0 < 6.4.4-16.4.4-1
linuxlinux_kernel>= 0 < 6.4.4-16.4.4-1
linuxlinux_kernel>= 3.5.0 < 4.14.3224.14.322
linuxlinux_kernel>= 4.15.0 < 4.19.2914.19.291
linuxlinux_kernel>= 4.20.0 < 5.4.2515.4.251
linuxlinux_kernel>= 5.11.0 < 5.15.1215.15.121
linuxlinux_kernel>= 5.16.0 < 6.1.396.1.39
linuxlinux_kernel>= 5.5.0 < 5.10.1885.10.188
linuxlinux_kernel>= 6.2.0 < 6.3.136.3.13
linuxlinux_kernel>= 6.4.0 < 6.4.46.4.4
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.