CVE-2023-53705ipv6: Fix out-of-bounds access in ipv6_find_tlv()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
- CVSS
- 8.2 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c61a404325093250b676f40ad8f4dd00f3bcab5f before 59e656d0d4a84ea0ee9a39c6f69160a3effccc94; from c61a404325093250b676f40ad8f4dd00f3bcab5f before 04bf69e3de435d793a203aacc4b774f8f9f2baeb; from c61a404325093250b676f40ad8f4dd00f3bcab5f before 011f47c8b8389154f996f5f69da8efc3a3beefef; from c61a404325093250b676f40ad8f4dd00f3bcab5f before e5f82688ae10f5f386952e65e941bb8868ee54dc; from c61a404325093250b676f40ad8f4dd00f3bcab5f before 9b92e2d0eb696d7586ba832c8854653b59887da0; from c61a404325093250b676f40ad8f4dd00f3bcab5f before 91dd8aab9c9f193210681b86b6b92840ffe74f0c; from c61a404325093250b676f40ad8f4dd00f3bcab5f before ae68c0f7edbc9a294094ce03a0aaf45aa489ce40; from c61a404325093250b676f40ad8f4dd00f3bcab5f before 878ecb0897f4737a4c9401f3523fd49589025671 | CNA record |
References
- https://git.kernel.org/stable/c/59e656d0d4a84ea0ee9a39c6f69160a3effccc94
- https://git.kernel.org/stable/c/04bf69e3de435d793a203aacc4b774f8f9f2baeb
- https://git.kernel.org/stable/c/011f47c8b8389154f996f5f69da8efc3a3beefef
- https://git.kernel.org/stable/c/e5f82688ae10f5f386952e65e941bb8868ee54dc
- https://git.kernel.org/stable/c/9b92e2d0eb696d7586ba832c8854653b59887da0
- https://git.kernel.org/stable/c/91dd8aab9c9f193210681b86b6b92840ffe74f0c
- https://git.kernel.org/stable/c/ae68c0f7edbc9a294094ce03a0aaf45aa489ce40
- https://git.kernel.org/stable/c/878ecb0897f4737a4c9401f3523fd49589025671
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.