CVE-2023-53705

Summary

In the Linux kernel, the following vulnerability has been resolved:

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access.

Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f < 59e656d0d4a84ea0ee9a39c6f69160a3effccc94affected
LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f < 04bf69e3de435d793a203aacc4b774f8f9f2baebaffected
LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f < 011f47c8b8389154f996f5f69da8efc3a3beefefaffected
LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f < e5f82688ae10f5f386952e65e941bb8868ee54dcaffected
LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f < 9b92e2d0eb696d7586ba832c8854653b59887da0affected
LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f < 91dd8aab9c9f193210681b86b6b92840ffe74f0caffected
LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f < ae68c0f7edbc9a294094ce03a0aaf45aa489ce40affected
LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f < 878ecb0897f4737a4c9401f3523fd49589025671affected
LinuxLinux2.6.19affected
LinuxLinux0 < 2.6.19unaffected
LinuxLinux4.14.316 <= 4.14.*unaffected
LinuxLinux4.19.284 <= 4.19.*unaffected
LinuxLinux5.4.244 <= 5.4.*unaffected
LinuxLinux5.10.181 <= 5.10.*unaffected
LinuxLinux5.15.114 <= 5.15.*unaffected
LinuxLinux6.1.31 <= 6.1.*unaffected
LinuxLinux6.3.5 <= 6.3.*unaffected
LinuxLinux6.4 <= *unaffected

Weaknesses

References