CVE-2023-53782

dccp: Fix out of bounds access in DCCP error handler

published December 9, 2025

CVSS
—
EPSS
0%
Percentile
13.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dccp: Fix out of bounds access in DCCP error handler

There was a previous attempt to fix an out-of-bounds access in the DCCP

error handlers, but that fix assumed that the error handlers only want

to access the first 8 bytes of the DCCP header. Actually, they also look

at the DCCP sequence number, which is stored beyond 8 bytes, so an

explicit pskb_may_pull() is required.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.9th percentile
Published
2025-12-09T00:00Z
EPSS history
Timeline
  • 09 DEC 00:00Z
    dccp: Fix out of bounds access in DCCP error handler
    cvelistv5