---
id: CVE-2023-53010
title: 'bnxt: Do not read past the end of test names'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bnxt: Do not read past the end of test names

  Test names were being concatenated based on a offset beyond the end of
  the first name, which tripped the buffer overflow d…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= eb51365846bc418687af4c4f41b68b6e84cdd449 <
    cefa85480ac99c0bef5a09daadb48d65fc28e279
  - >-
    Linux >= eb51365846bc418687af4c4f41b68b6e84cdd449 <
    d3e599c090fc6977331150c5f0a69ab8ce87da21
  - Linux 4.12
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:14:31.870506Z'
published: '2025-03-27'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:20:54.133Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-53010'
references:
  - url: 'https://git.kernel.org/stable/c/cefa85480ac99c0bef5a09daadb48d65fc28e279'
  - url: 'https://git.kernel.org/stable/c/d3e599c090fc6977331150c5f0a69ab8ce87da21'
tags:
  - cve.org
epss: 0.00193
epssPercentile: 0.09054
ingestedAt: '2026-11-05T22:38:31.753Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

bnxt: Do not read past the end of test names

Test names were being concatenated based on a offset beyond the end of
the first name, which tripped the buffer overflow detection logic:

 detected buffer overflow in strnlen
 [...]
 Call Trace:
 bnxt_ethtool_init.cold+0x18/0x18

Refactor struct hwrm_selftest_qlist_output to use an actual array,
and adjust the concatenation to use snprintf() rather than a series of
strncat() calls.

## Affected

- `Linux >= eb51365846bc418687af4c4f41b68b6e84cdd449 < cefa85480ac99c0bef5a09daadb48d65fc28e279`
- `Linux >= eb51365846bc418687af4c4f41b68b6e84cdd449 < d3e599c090fc6977331150c5f0a69ab8ce87da21`
- `Linux 4.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.