01 Record

CVE-2023-53705

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

HighPUBLISHEDCNA: Linux

CNA base score8.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

View raw JSON

02 Description

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.56% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 46.6% of scored records. A rank, not a probability.

NVD base score

8.2 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-10-28.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-10-22 13:23Z1 YR AGO
Last updated: 2026-10-15 21:41Z13 DAYS AGO
Reserved: 2025-10-22
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 8.2)
CNA CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 5a00024579fb87a95801906f1541b4d65173be8a61408abb172f2d245a334a77

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc61a404325093250b676f40ad8f4dd00f3bcab5f to < 59e656d0d4a84ea0ee9a39c6f69160a3effccc94, c61a404325093250b676f40ad8f4dd00f3bcab5f to < 04bf69e3de435d793a203aacc4b774f8f9f2baeb, c61a404325093250b676f40ad8f4dd00f3bcab5f to < 011f47c8b8389154f996f5f69da8efc3a3beefef, c61a404325093250b676f40ad8f4dd00f3bcab5f to < e5f82688ae10f5f386952e65e941bb8868ee54dc, c61a404325093250b676f40ad8f4dd00f3bcab5f to < 9b92e2d0eb696d7586ba832c8854653b59887da0, c61a404325093250b676f40ad8f4dd00f3bcab5f to < 91dd8aab9c9f193210681b86b6b92840ffe74f0c, c61a404325093250b676f40ad8f4dd00f3bcab5f to < ae68c0f7edbc9a294094ce03a0aaf45aa489ce40, c61a404325093250b676f40ad8f4dd00f3bcab5f to < 878ecb0897f4737a4c9401f3523fd49589025671, 2.6.19—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/59e656d0d4a84ea0ee9a39c6f69160a3effccc94
git.kernel.orghttps://git.kernel.org/stable/c/04bf69e3de435d793a203aacc4b774f8f9f2baeb
git.kernel.orghttps://git.kernel.org/stable/c/011f47c8b8389154f996f5f69da8efc3a3beefef
git.kernel.orghttps://git.kernel.org/stable/c/e5f82688ae10f5f386952e65e941bb8868ee54dc
git.kernel.orghttps://git.kernel.org/stable/c/9b92e2d0eb696d7586ba832c8854653b59887da0
git.kernel.orghttps://git.kernel.org/stable/c/91dd8aab9c9f193210681b86b6b92840ffe74f0c
git.kernel.orghttps://git.kernel.org/stable/c/ae68c0f7edbc9a294094ce03a0aaf45aa489ce40
git.kernel.orghttps://git.kernel.org/stable/c/878ecb0897f4737a4c9401f3523fd49589025671

07 Fixed in

Debian 12

linux
Fixed in 6.1.37-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.