VULNERABILITY INTELLIGENCE

CVE-2023-53705

CVSS score8.2 HIGH
EPSS probability0.56%
CISA KEVNot currently listed
Published2025-10-22
Last modified2026-10-28
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

Primary references