{"id":"CVE-2023-53705","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix out-of-bounds access in ipv6_find_tlv()\n\noptlen is fetched without checking whether there is more than one byte to parse.\nIt can lead to out-of-bounds access.…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix out-of-bounds access in ipv6_find_tlv()\n\noptlen is fetched without checking whether there is more than one byte to parse.\nIt can lead to out-of-bounds access.…","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 59e656d0d4a84ea0ee9a39c6f69160a3effccc94","Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 04bf69e3de435d793a203aacc4b774f8f9f2baeb","Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 011f47c8b8389154f996f5f69da8efc3a3beefef","Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f < e5f82688ae10f5f386952e65e941bb8868ee54dc","Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 9b92e2d0eb696d7586ba832c8854653b59887da0","Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 91dd8aab9c9f193210681b86b6b92840ffe74f0c","Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f < ae68c0f7edbc9a294094ce03a0aaf45aa489ce40","Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 878ecb0897f4737a4c9401f3523fd49589025671","Linux 2.6.19"],"published":"2025-10-22","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:17:46.803","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-53705","references":[{"url":"https://git.kernel.org/stable/c/011f47c8b8389154f996f5f69da8efc3a3beefef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/04bf69e3de435d793a203aacc4b774f8f9f2baeb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/59e656d0d4a84ea0ee9a39c6f69160a3effccc94","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/878ecb0897f4737a4c9401f3523fd49589025671","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/91dd8aab9c9f193210681b86b6b92840ffe74f0c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9b92e2d0eb696d7586ba832c8854653b59887da0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ae68c0f7edbc9a294094ce03a0aaf45aa489ce40","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e5f82688ae10f5f386952e65e941bb8868ee54dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00564,"epssPercentile":0.4671,"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-15T21:36:38.329449Z"},"ingestedAt":"2026-10-15T22:48:25.415Z","slug":"CVE-2023-53705","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: Fix out-of-bounds access in ipv6_find_tlv()\n\noptlen is fetched without checking whether there is more than one byte to parse.\nIt can lead to out-of-bounds access.\n\nFound by InfoTeCS on behalf of Linux Verification Center\n(linuxtesting.org) with SVACE.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}