CVE-2023-53516
HIGH EPSS 3.2%
Published Oct 1, 20259mo ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
Published Oct 1, 2025 9mo ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF The previous commit 954d1fa1ac93 ("macvlan: Add netlink attribute for broadcast cutoff") added one additional attribute named IFLA_MACVLAN_BC_CUTOFF to allow broadcast cutfoff. However, it forgot to describe the nla_policy at macvlan_policy (drivers/net/macvlan.c). Hence, this suppose NLA_S32 (4 bytes) integer can be faked as empty (0 bytes) by a malicious user, which could leads to OOB in heap just like CVE-2023-3773. To fix it, this commit just completes the nla_policy description for IFLA_MACVLAN_BC_CUTOFF. This enforces the length check and avoids the potential OOB read.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
3.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-787 Out-of-bounds Write Memory Safety
Affected Products 4
References 2
- git.kernel.org https://git.kernel.org/stable/c/55cef78c244d0d076f5a75a35530ca63c92f4426
- git.kernel.org https://git.kernel.org/stable/c/79f44709aa7a744fbfbadd4aef678443290c6991
Remediation
- git.kernel.org https://git.kernel.org/stable/c/55cef78c244d0d076f5a75a35530ca63c92f4426
- git.kernel.org https://git.kernel.org/stable/c/79f44709aa7a744fbfbadd4aef678443290c6991