Review reviewHigh

CVE-2023-53705

Linux

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

CVSS: 8.2
EPSS: 0.53%
CISA KEV: Not listed
Published: 2025.10.22

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.53%

Technical severityCVSS 8.2

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 59e656d0d4a84ea0ee9a39c6f69160a3effccc94, >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 04bf69e3de435d793a203aacc4b774f8f9f2baeb, >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 011f47c8b8389154f996f5f69da8efc3a3beefef, >= c61a404325093250b676f40ad8f4dd00f3bcab5f < e5f82688ae10f5f386952e65e941bb8868ee54dc, >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 9b92e2d0eb696d7586ba832c8854653b59887da0, >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 91dd8aab9c9f193210681b86b6b92840ffe74f0c, >= c61a404325093250b676f40ad8f4dd00f3bcab5f < ae68c0f7edbc9a294094ce03a0aaf45aa489ce40, >= c61a404325093250b676f40ad8f4dd00f3bcab5f < 878ecb0897f4737a4c9401f3523fd49589025671, >= 2.6.19
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CWE: Not available