SECUFOCUSNOW
Home›CVE index›CVE-2023-53726
Review reviewHigh

CVE-2023-53726

Linux

In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB access in IP checksum code for negative lengths Although commit c2c24edb1d9c ("arm64: csum: Fix pathological zero-length calls") added an early return for zero-length input, syzkaller has popped up with an example of a _negative_ length which causes an undefined shift and an out-of-bounds read: | BUG: KASAN: slab-out-of-bounds in do_csum+0x44/0x254 arch/arm64/lib/csum.c:39 | Read of size 4294966928 at addr ffff0000d7ac0170 by task syz-executor412/5975 | | CPU: 0 PID: 5975 Comm: syz-executor412 Not taint...

CVSS
7.1
EPSS
0.14%
3.71% percentile
CISA KEV
Not listed
Published
2025.10.22
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.14%
Technical severityCVSS 7.1

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB access in IP checksum code for negative lengths Although commit c2c24edb1d9c ("arm64: csum: Fix pathological zero-length calls") added an early return for zero-length input, syzkaller has popped up with an example of a _negative_ length which causes an undefined shift and an out-of-bounds read: | BUG: KASAN: slab-out-of-bounds in do_csum+0x44/0x254 arch/arm64/lib/csum.c:39 | Read of size 4294966928 at addr ffff0000d7ac0170 by task syz-executor412/5975 | | CPU: 0 PID: 5975 Comm: syz-executor412 Not taint...

Affected product and versions

Product
Linux
Affected versions
>= 5777eaed566a1d63e344d3dd8f2b5e33be20643e < 5a85727239a23de1cc8d93985f1056308128f3e2, >= 5777eaed566a1d63e344d3dd8f2b5e33be20643e < 9a43563cfd6b9200ff2f76b3f9fcdcb217ceb523, >= 5777eaed566a1d63e344d3dd8f2b5e33be20643e < ba0b46166b8e547024d02345a68b747841931ad2, >= 5777eaed566a1d63e344d3dd8f2b5e33be20643e < a5ad2f87d8e74e351d3f500ad9d5b3a5653e1c6f, >= 5777eaed566a1d63e344d3dd8f2b5e33be20643e < fcdf904e866de0e3715835e50409fda3b2590527, >= 5777eaed566a1d63e344d3dd8f2b5e33be20643e < 8bd795fedb8450ecbef18eeadbd23ed8fc7630f5, >= 5.6
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE
Not available