CVE-2023-53705
BaseFortify
Publication date: 2025-10-22
Last updated on: 2025-10-22
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds access issue in the Linux kernel's IPv6 implementation, specifically in the function ipv6_find_tlv(). The problem occurs because the code fetches the optlen value without verifying that there is more than one byte available to parse, which can lead to accessing memory outside the intended bounds.
How can this vulnerability impact me? :
The vulnerability can lead to out-of-bounds memory access, which may cause system instability, crashes, or potentially allow an attacker to execute arbitrary code or cause denial of service on affected Linux systems.