Riskcovery

CVE-2023-53033

netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

State
Published
Severity
7.8 High
Published
Mar 27, 2025
Updated
Aug 5, 2026
Reserved
Mar 27, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlan_ethhdr scratchpad area. The remaining bytes beyond ethernet + vlan header are copied directly from the skbuff data area.

Fix incorrect arithmetic operator: subtract, not add, the size of the vlan header in case of double-tagged packets to adjust the length accordingly to address CVE-2023-0179.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f6ae9f120dada00abfb47313364c35118469455f to before 550efeff989b041f3746118c0ddd863c39ddc1aaAffected
  • f6ae9f120dada00abfb47313364c35118469455f to before a8acfe2c6fb99f9375a9325807a179cd8c32e6e3Affected
  • f6ae9f120dada00abfb47313364c35118469455f to before 76ef74d4a379faa451003621a84e3498044e7aa3Affected
  • f6ae9f120dada00abfb47313364c35118469455f to before 696e1a48b1a1b01edad542a1ef293665864a4dd0Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.164 through 5.10.*Not affected
  • 5.15.89 through 5.15.*Not affected
  • 6.1.7 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.