Riskcovery

CVE-2023-53661

bnxt: avoid overflow in bnxt_get_nvram_directory()

State
Published
Severity
Not scored
Published
Oct 7, 2025
Updated
May 11, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bnxt: avoid overflow in bnxt_get_nvram_directory()

The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplication instead operator for avoiding overflow.

Found by Security Code and Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c0c050c58d840994ba842ad1c338a98e7c12b764 to before d5eaf2a6b077f32a477feb1e9e1c1f60605b460eAffected
  • c0c050c58d840994ba842ad1c338a98e7c12b764 to before efb1a257513438d43f4335f09b2f684e8167cad2Affected
  • c0c050c58d840994ba842ad1c338a98e7c12b764 to before 17e0453a7523ad7a25bb47af941b150a6c66d7b6Affected
  • c0c050c58d840994ba842ad1c338a98e7c12b764 to before 7c6dddc239abe660598c49ec95ea0ed6399a4b2aAffected
LinuxLinux
  • 4.4Affected
  • before 4.4Not affected
  • 5.15.113 through 5.15.*Not affected
  • 6.1.30 through 6.1.*Not affected
  • 6.3.4 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.