CVE-2023-53705

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

State: Published
Severity: 8.2 High
Published: Oct 22, 2025
Updated: Oct 15, 2026
Reserved: Oct 22, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access.

Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c61a404325093250b676f40ad8f4dd00f3bcab5f to before 59e656d0d4a84ea0ee9a39c6f69160a3effccc94Affected c61a404325093250b676f40ad8f4dd00f3bcab5f to before 04bf69e3de435d793a203aacc4b774f8f9f2baebAffected c61a404325093250b676f40ad8f4dd00f3bcab5f to before 011f47c8b8389154f996f5f69da8efc3a3beefefAffected c61a404325093250b676f40ad8f4dd00f3bcab5f to before e5f82688ae10f5f386952e65e941bb8868ee54dcAffected c61a404325093250b676f40ad8f4dd00f3bcab5f to before 9b92e2d0eb696d7586ba832c8854653b59887da0Affected c61a404325093250b676f40ad8f4dd00f3bcab5f to before 91dd8aab9c9f193210681b86b6b92840ffe74f0cAffected c61a404325093250b676f40ad8f4dd00f3bcab5f to before ae68c0f7edbc9a294094ce03a0aaf45aa489ce40Affected c61a404325093250b676f40ad8f4dd00f3bcab5f to before 878ecb0897f4737a4c9401f3523fd49589025671Affected
LinuxLinux	2.6.19Affected before 2.6.19Not affected 4.14.316 through 4.14.Not affected 4.19.284 through 4.19.Not affected 5.4.244 through 5.4.Not affected 5.10.181 through 5.10.Not affected 5.15.114 through 5.15.Not affected 6.1.31 through 6.1.Not affected 6.3.5 through 6.3.*Not affected 6.4 and laterNot affected

Product

Versions

LinuxLinux

c61a404325093250b676f40ad8f4dd00f3bcab5f to before 59e656d0d4a84ea0ee9a39c6f69160a3effccc94Affected
c61a404325093250b676f40ad8f4dd00f3bcab5f to before 04bf69e3de435d793a203aacc4b774f8f9f2baebAffected
c61a404325093250b676f40ad8f4dd00f3bcab5f to before 011f47c8b8389154f996f5f69da8efc3a3beefefAffected
c61a404325093250b676f40ad8f4dd00f3bcab5f to before e5f82688ae10f5f386952e65e941bb8868ee54dcAffected
c61a404325093250b676f40ad8f4dd00f3bcab5f to before 9b92e2d0eb696d7586ba832c8854653b59887da0Affected
c61a404325093250b676f40ad8f4dd00f3bcab5f to before 91dd8aab9c9f193210681b86b6b92840ffe74f0cAffected
c61a404325093250b676f40ad8f4dd00f3bcab5f to before ae68c0f7edbc9a294094ce03a0aaf45aa489ce40Affected
c61a404325093250b676f40ad8f4dd00f3bcab5f to before 878ecb0897f4737a4c9401f3523fd49589025671Affected

LinuxLinux

2.6.19Affected
before 2.6.19Not affected
4.14.316 through 4.14.*Not affected
4.19.284 through 4.19.*Not affected
5.4.244 through 5.4.*Not affected
5.10.181 through 5.10.*Not affected
5.15.114 through 5.15.*Not affected
6.1.31 through 6.1.*Not affected
6.3.5 through 6.3.*Not affected
6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.