Back to CVE records
High 7.8Published May 2, 2025
CVE-2023-53080xsk: Add missing overflow check in xdp_umem_reg
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: xsk: Add missing overflow check in xdp_umem_reg The number of chunks can overflow u32. Make sure to return -EINVAL on overflow. Also remove a redundant u32 cast assigning umem->npgs.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from bbff2f321a864ee07c9d3d1245af498023146951 before 580634b03a55f04a3c1968bcbd97736c079c6601; from bbff2f321a864ee07c9d3d1245af498023146951 before 3cfc3564411acf96bf2fb791f706a1aa4f872c1d; from bbff2f321a864ee07c9d3d1245af498023146951 before a069909acc4435eeb41d05ccc03baa447cc01b7e; from bbff2f321a864ee07c9d3d1245af498023146951 before bb2e3bfb2a79db0c2057c6f701b782954394c67f; from bbff2f321a864ee07c9d3d1245af498023146951 before c7df4813b149362248d6ef7be41a311e27bf75fe | CNA record |
linux linux_kernel linux:linux_kernel | from 4.18 before 5.10.177; from 5.11 before 5.15.105; from 5.16 before 6.1.22; from 6.2 before 6.2.9; 6.3; 6.3; 6.3 | NVD |
References
- https://git.kernel.org/stable/c/580634b03a55f04a3c1968bcbd97736c079c6601patch
- https://git.kernel.org/stable/c/3cfc3564411acf96bf2fb791f706a1aa4f872c1dpatch
- https://git.kernel.org/stable/c/a069909acc4435eeb41d05ccc03baa447cc01b7epatch
- https://git.kernel.org/stable/c/bb2e3bfb2a79db0c2057c6f701b782954394c67fpatch
- https://git.kernel.org/stable/c/c7df4813b149362248d6ef7be41a311e27bf75fepatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.