CVE-2023-53010

bnxt: Do not read past the end of test names

State
Published
Severity
Not scored
Published
Mar 27, 2025
Updated
May 11, 2026
Reserved
Mar 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bnxt: Do not read past the end of test names

Test names were being concatenated based on a offset beyond the end of the first name, which tripped the buffer overflow detection logic:

detected buffer overflow in strnlen [...] Call Trace: bnxt_ethtool_init.cold+0x18/0x18

Refactor struct hwrm_selftest_qlist_output to use an actual array, and adjust the concatenation to use snprintf() rather than a series of strncat() calls.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • eb51365846bc418687af4c4f41b68b6e84cdd449 to before cefa85480ac99c0bef5a09daadb48d65fc28e279Affected
  • eb51365846bc418687af4c4f41b68b6e84cdd449 to before d3e599c090fc6977331150c5f0a69ab8ce87da21Affected
LinuxLinux
  • 4.12Affected
  • before 4.12Not affected
  • 6.1.9 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.