CVE-2023-53535

CVE-2023-53535

High · published October 4, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: bcmgenet: Add a check for oversized packets

Occasionnaly we may get oversized packets from the hardware which

exceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early

check which drops the packet to avoid invoking skb_over_panic() and move

on to processing the next packet.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Published
2025-10-04T20:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 3.15, < 4.14.3084.14.308
linux/linux_kernel≥ 4.15, < 4.19.2764.19.276
linux/linux_kernel≥ 4.20, < 5.4.2355.4.235
linux/linux_kernel≥ 5.5, < 5.10.1735.10.173
linux/linux_kernel≥ 5.11, < 5.15.995.15.99
linux/linux_kernel≥ 5.16, < 6.1.166.1.16
linux/linux_kernel≥ 6.2, < 6.2.36.2.3
References (8)
EPSS history
Timeline
  • 04 OCT 15:16Z
    net: bcmgenet: Add a check for oversized packets
    cvelistv5