---
id: CVE-2023-53705
title: >-
  In the Linux kernel, the following vulnerability has been resolved:


  ipv6: Fix out-of-bounds access in ipv6_find_tlv()


  optlen is fetched without checking whether there is more than one byte to
  parse.

  It can lead to out-of-bounds access.…
summary: >-
  In the Linux kernel, the following vulnerability has been resolved:


  ipv6: Fix out-of-bounds access in ipv6_find_tlv()


  optlen is fetched without checking whether there is more than one byte to
  parse.

  It can lead to out-of-bounds access.…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f <
    59e656d0d4a84ea0ee9a39c6f69160a3effccc94
  - >-
    Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f <
    04bf69e3de435d793a203aacc4b774f8f9f2baeb
  - >-
    Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f <
    011f47c8b8389154f996f5f69da8efc3a3beefef
  - >-
    Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f <
    e5f82688ae10f5f386952e65e941bb8868ee54dc
  - >-
    Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f <
    9b92e2d0eb696d7586ba832c8854653b59887da0
  - >-
    Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f <
    91dd8aab9c9f193210681b86b6b92840ffe74f0c
  - >-
    Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f <
    ae68c0f7edbc9a294094ce03a0aaf45aa489ce40
  - >-
    Linux >= c61a404325093250b676f40ad8f4dd00f3bcab5f <
    878ecb0897f4737a4c9401f3523fd49589025671
  - Linux 2.6.19
published: '2025-10-22'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:46.803'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-53705'
references:
  - url: 'https://git.kernel.org/stable/c/011f47c8b8389154f996f5f69da8efc3a3beefef'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/04bf69e3de435d793a203aacc4b774f8f9f2baeb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/59e656d0d4a84ea0ee9a39c6f69160a3effccc94'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/878ecb0897f4737a4c9401f3523fd49589025671'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/91dd8aab9c9f193210681b86b6b92840ffe74f0c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9b92e2d0eb696d7586ba832c8854653b59887da0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ae68c0f7edbc9a294094ce03a0aaf45aa489ce40'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e5f82688ae10f5f386952e65e941bb8868ee54dc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00564
epssPercentile: 0.4671
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-15T21:36:38.329449Z'
ingestedAt: '2026-10-15T22:48:25.415Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

optlen is fetched without checking whether there is more than one byte to parse.
It can lead to out-of-bounds access.

Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.