CVE-2023-53782

dccp: Fix out of bounds access in DCCP error handler

State: Published
Severity: Not scored
Published: Dec 9, 2025
Updated: May 23, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

dccp: Fix out of bounds access in DCCP error handler

There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only want to access the first 8 bytes of the DCCP header. Actually, they also look at the DCCP sequence number, which is stored beyond 8 bytes, so an explicit pskb_may_pull() is required.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 3533e10272555c422a7d51ebc0ce8c483429f7f2Affected 6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 177212bf6dc1ff2d13d0409cddc5c9e81feec63dAffected 6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 7a7dd70cb954d3efa706a429687ded88c02496faAffected 6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 4b8a938e329ae4eb54b73b0c87b5170607b038a8Affected 6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9Affected 6706a97fec963d6cb3f7fc2978ec1427b4651214 to before f8a7f10a1dccf9868ff09342a73dce27501b86dfAffected 6706a97fec963d6cb3f7fc2978ec1427b4651214 to before d8171411a661253e6271fa10b65b46daf1b6471cAffected 6706a97fec963d6cb3f7fc2978ec1427b4651214 to before ec620c34f5fa5d055f9f6136a387755db6157712Affected 6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 977ad86c2a1bcaf58f01ab98df5cc145083c489cAffected 96106a207ae972d8f9e4815e84c159f29e4bbee7Affected 261def571d19d3b4e2228643c5c0ac89f5e10d15Affected dbf1719c65fb0368a94d15767c669e47e295a073Affected 46b1ffd4738a3ee04b2e8f5a4b8cfc39e9c722a2Affected a2df29ed840f90e459a3f8ff029b216be3912731Affected ba93cf7d2118774c0b2dcfccc8ae999427815caaAffected 4ca7e66fcce02459fa6961979f9fe30ae1098cf0Affected bd380617d5d161ea2bbe7a8073b3ca7bca0381e5Affected bfe7d1dee859cad6802f8e21a0a863f408114612Affected 968953df833c61fce5adcc0612efeaced24e5719Affected 99131760a8851e6e5b2c9b24d0a68a3068923a08Affected 84d9c612bb7a9e44c6bf286bedfbe72a6d2d71d4Affected 3.2.87 to before 3.3Affected 3.10.105 to before 3.11Affected 3.12.68 to before 3.13Affected 3.16.42 to before 3.17Affected and 2 more versions
LinuxLinux	4.9Affected before 4.9Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 3533e10272555c422a7d51ebc0ce8c483429f7f2Affected
6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 177212bf6dc1ff2d13d0409cddc5c9e81feec63dAffected
6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 7a7dd70cb954d3efa706a429687ded88c02496faAffected
6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 4b8a938e329ae4eb54b73b0c87b5170607b038a8Affected
6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9Affected
6706a97fec963d6cb3f7fc2978ec1427b4651214 to before f8a7f10a1dccf9868ff09342a73dce27501b86dfAffected
6706a97fec963d6cb3f7fc2978ec1427b4651214 to before d8171411a661253e6271fa10b65b46daf1b6471cAffected
6706a97fec963d6cb3f7fc2978ec1427b4651214 to before ec620c34f5fa5d055f9f6136a387755db6157712Affected
6706a97fec963d6cb3f7fc2978ec1427b4651214 to before 977ad86c2a1bcaf58f01ab98df5cc145083c489cAffected
96106a207ae972d8f9e4815e84c159f29e4bbee7Affected
261def571d19d3b4e2228643c5c0ac89f5e10d15Affected
dbf1719c65fb0368a94d15767c669e47e295a073Affected
46b1ffd4738a3ee04b2e8f5a4b8cfc39e9c722a2Affected
a2df29ed840f90e459a3f8ff029b216be3912731Affected
ba93cf7d2118774c0b2dcfccc8ae999427815caaAffected
4ca7e66fcce02459fa6961979f9fe30ae1098cf0Affected
bd380617d5d161ea2bbe7a8073b3ca7bca0381e5Affected
bfe7d1dee859cad6802f8e21a0a863f408114612Affected
968953df833c61fce5adcc0612efeaced24e5719Affected
99131760a8851e6e5b2c9b24d0a68a3068923a08Affected
84d9c612bb7a9e44c6bf286bedfbe72a6d2d71d4Affected
3.2.87 to before 3.3Affected
3.10.105 to before 3.11Affected
3.12.68 to before 3.13Affected
3.16.42 to before 3.17Affected
and 2 more versions

LinuxLinux

4.9Affected
before 4.9Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.