---
id: CVE-2023-53535
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: bcmgenet: Add a check for oversized packets

  Occasionnaly we may get oversized packets from the hardware which
  exceed the nomimal 2KiB buffer size we allocate SKBs…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: bcmgenet: Add a check for oversized packets

  Occasionnaly we may get oversized packets from the hardware which
  exceed the nomimal 2KiB buffer size we allocate SKBs…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 3.15, < 4.14.308'
  - 'linux_kernel >= 4.15, < 4.19.276'
  - 'linux_kernel >= 4.20, < 5.4.235'
  - 'linux_kernel >= 5.5, < 5.10.173'
  - 'linux_kernel >= 5.11, < 5.15.99'
  - 'linux_kernel >= 5.16, < 6.1.16'
  - 'linux_kernel >= 6.2, < 6.2.3'
patched:
  - linux_kernel 6.2.3
published: '2025-10-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:42.430'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-53535'
references:
  - url: 'https://git.kernel.org/stable/c/124ca24e0de958d2e20e0aa1e2434af7b72f8887'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/411317d2a4a7d6049d8efeef0d32ae43f8baefce'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5c0862c2c962052ed5055220a00ac1cefb92fbcd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5f56767fb5f2df875b6553e08dbec6a45431c988'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7cdb07e10c1258c08f31b24898930e4ece88d163'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/841881320562cbeac7046b537b91cd000480cea2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/87363d1ab55e497702a9506ff423c422639c8a25'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c34b1c0870323649d45c5074828d7f754dea2673'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00235
epssPercentile: 0.14406
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-15T21:35:28.502360Z'
ingestedAt: '2026-10-15T22:48:25.406Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: bcmgenet: Add a check for oversized packets

Occasionnaly we may get oversized packets from the hardware which
exceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early
check which drops the packet to avoid invoking skb_over_panic() and move
on to processing the next packet.

## Affected

- `linux_kernel >= 3.15, < 4.14.308`
- `linux_kernel >= 4.15, < 4.19.276`
- `linux_kernel >= 4.20, < 5.4.235`
- `linux_kernel >= 5.5, < 5.10.173`
- `linux_kernel >= 5.11, < 5.15.99`
- `linux_kernel >= 5.16, < 6.1.16`
- `linux_kernel >= 6.2, < 6.2.3`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.2.3`