CVE-2023-53535 (GCVE-0-2023-53535)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:16 – Updated: 2026-08-05 09:14
VLAI
Title
net: bcmgenet: Add a check for oversized packets
Summary
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized packets from the hardware which exceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early check which drops the packet to avoid invoking skb_over_panic() and move on to processing the next packet.
Severity
7.1 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: 1c1008c793fa46703a2fee469f4235e1c7984333 , < 7cdb07e10c1258c08f31b24898930e4ece88d163 (git)
Affected: 1c1008c793fa46703a2fee469f4235e1c7984333 , < c34b1c0870323649d45c5074828d7f754dea2673 (git)
Affected: 1c1008c793fa46703a2fee469f4235e1c7984333 , < 87363d1ab55e497702a9506ff423c422639c8a25 (git)
Affected: 1c1008c793fa46703a2fee469f4235e1c7984333 , < 841881320562cbeac7046b537b91cd000480cea2 (git)
Affected: 1c1008c793fa46703a2fee469f4235e1c7984333 , < 124ca24e0de958d2e20e0aa1e2434af7b72f8887 (git)
Affected: 1c1008c793fa46703a2fee469f4235e1c7984333 , < 5f56767fb5f2df875b6553e08dbec6a45431c988 (git)
Affected: 1c1008c793fa46703a2fee469f4235e1c7984333 , < 411317d2a4a7d6049d8efeef0d32ae43f8baefce (git)
Affected: 1c1008c793fa46703a2fee469f4235e1c7984333 , < 5c0862c2c962052ed5055220a00ac1cefb92fbcd (git)
Create a notification for this product.
Linux Linux Affected: 3.15
Unaffected: 0 , < 3.15 (semver)
Unaffected: 4.14.308 , ≤ 4.14.* (semver)
Unaffected: 4.19.276 , ≤ 4.19.* (semver)
Unaffected: 5.4.235 , ≤ 5.4.* (semver)
Unaffected: 5.10.173 , ≤ 5.10.* (semver)
Unaffected: 5.15.99 , ≤ 5.15.* (semver)
Unaffected: 6.1.16 , ≤ 6.1.* (semver)
Unaffected: 6.2.3 , ≤ 6.2.* (semver)
Unaffected: 6.3 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/genet/bcmgenet.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7cdb07e10c1258c08f31b24898930e4ece88d163",
              "status": "affected",
              "version": "1c1008c793fa46703a2fee469f4235e1c7984333",
              "versionType": "git"
            },
            {
              "lessThan": "c34b1c0870323649d45c5074828d7f754dea2673",
              "status": "affected",
              "version": "1c1008c793fa46703a2fee469f4235e1c7984333",
              "versionType": "git"
            },
            {
              "lessThan": "87363d1ab55e497702a9506ff423c422639c8a25",
              "status": "affected",
              "version": "1c1008c793fa46703a2fee469f4235e1c7984333",
              "versionType": "git"
            },
            {
              "lessThan": "841881320562cbeac7046b537b91cd000480cea2",
              "status": "affected",
              "version": "1c1008c793fa46703a2fee469f4235e1c7984333",
              "versionType": "git"
            },
            {
              "lessThan": "124ca24e0de958d2e20e0aa1e2434af7b72f8887",
              "status": "affected",
              "version": "1c1008c793fa46703a2fee469f4235e1c7984333",
              "versionType": "git"
            },
            {
              "lessThan": "5f56767fb5f2df875b6553e08dbec6a45431c988",
              "status": "affected",
              "version": "1c1008c793fa46703a2fee469f4235e1c7984333",
              "versionType": "git"
            },
            {
              "lessThan": "411317d2a4a7d6049d8efeef0d32ae43f8baefce",
              "status": "affected",
              "version": "1c1008c793fa46703a2fee469f4235e1c7984333",
              "versionType": "git"
            },
            {
              "lessThan": "5c0862c2c962052ed5055220a00ac1cefb92fbcd",
              "status": "affected",
              "version": "1c1008c793fa46703a2fee469f4235e1c7984333",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/genet/bcmgenet.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.15"
            },
            {
              "lessThan": "3.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.308",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.276",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.235",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.173",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.99",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.308",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.276",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.235",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.173",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.99",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.16",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.3",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "3.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bcmgenet: Add a check for oversized packets\n\nOccasionnaly we may get oversized packets from the hardware which\nexceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early\ncheck which drops the packet to avoid invoking skb_over_panic() and move\non to processing the next packet."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The vulnerable code is the bcmgenet RX descriptor path executed on every Ethernet/MoCA frame the MAC delivers, so the attacker only needs to inject traffic onto the same L2 segment as the Raspberry Pi 4/CM4 or Broadcom set-top box. An RX buffer length above 2048 requires a link-layer framing/oversize condition that cannot survive routing (UMAC_MAX_FRAME_LEN is 1536 and path MTU caps routed frames), so this is adjacent rather than fully remote.\nAC:L - The attacker fully controls the volume, size and framing of the traffic hitting the MAC and can retry indefinitely at line rate at zero cost; there is no race to win, no memory layout to groom, and no target state the attacker cannot influence. Repeatable free retries against a condition the maintainer describes as occurring during normal reception make this Low.\nPR:N - No account, credential, or capability on the target is needed \u2014 bcmgenet_desc_rx() runs in NAPI softirq context on received frames long before any authentication, filtering, or socket-layer authorization is consulted. Any host on the shared Ethernet/coax segment can reach it.\nUI:N - No victim action is required; the interface merely has to be up and receiving, which is its normal operating state. The vulnerable skb_put() executes automatically for every descriptor processed.\nS:U - The panic and the stale-memory read both occur in the host kernel\u0027s own security authority, with no VM, hypervisor, IOMMU, or sandbox boundary crossed. Standard kernel-local impact.\nC:L - For len values between the 2048-byte DMA region and the 2112-byte SKB tailroom, skb_put() succeeds and hands up to 64 bytes of stale per-CPU page_frag memory (leftovers of previously received packets) to the network stack, where a bridging/forwarding deployment can transmit it back onto the wire. The read is hard-capped by skb-\u003eend and the IP stack trims it in most paths, so the disclosure is real but strictly bounded.\nI:N - The RDMA ring\u0027s DMA_RING_BUF_SIZE is programmed with RX_BUF_LENGTH, so the hardware never writes past the 2048-byte mapping \u2014 the bug is a bogus length report, not an out-of-bounds write. No kernel memory is corrupted and no control-flow or data-write primitive is obtained.\nA:H - Any reported length above 2112 drives skb_put() into skb_over_panic(), which calls BUG() from softirq context, taking the machine down immediately (the unmasked 16-bit shift permits lengths up to 65535, far past the limit). This is a full denial of service reachable from the network with no credentials."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:39.345Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7cdb07e10c1258c08f31b24898930e4ece88d163"
        },
        {
          "url": "https://git.kernel.org/stable/c/c34b1c0870323649d45c5074828d7f754dea2673"
        },
        {
          "url": "https://git.kernel.org/stable/c/87363d1ab55e497702a9506ff423c422639c8a25"
        },
        {
          "url": "https://git.kernel.org/stable/c/841881320562cbeac7046b537b91cd000480cea2"
        },
        {
          "url": "https://git.kernel.org/stable/c/124ca24e0de958d2e20e0aa1e2434af7b72f8887"
        },
        {
          "url": "https://git.kernel.org/stable/c/5f56767fb5f2df875b6553e08dbec6a45431c988"
        },
        {
          "url": "https://git.kernel.org/stable/c/411317d2a4a7d6049d8efeef0d32ae43f8baefce"
        },
        {
          "url": "https://git.kernel.org/stable/c/5c0862c2c962052ed5055220a00ac1cefb92fbcd"
        }
      ],
      "title": "net: bcmgenet: Add a check for oversized packets",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53535",
    "datePublished": "2025-10-04T15:16:46.583Z",
    "dateReserved": "2025-10-04T15:14:15.919Z",
    "dateUpdated": "2026-08-05T09:14:39.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53535",
      "date": "2026-08-15",
      "epss": "0.00214",
      "percentile": "0.12095"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53535\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-10-04T16:15:48.457\",\"lastModified\":\"2026-08-04T10:19:10.890\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: bcmgenet: Add a check for oversized packets\\n\\nOccasionnaly we may get oversized packets from the hardware which\\nexceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early\\ncheck which drops the packet to avoid invoking skb_over_panic() and move\\non to processing the next packet.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/net/ethernet/broadcom/genet/bcmgenet.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"1c1008c793fa46703a2fee469f4235e1c7984333\",\"lessThan\":\"7cdb07e10c1258c08f31b24898930e4ece88d163\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1c1008c793fa46703a2fee469f4235e1c7984333\",\"lessThan\":\"c34b1c0870323649d45c5074828d7f754dea2673\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1c1008c793fa46703a2fee469f4235e1c7984333\",\"lessThan\":\"87363d1ab55e497702a9506ff423c422639c8a25\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1c1008c793fa46703a2fee469f4235e1c7984333\",\"lessThan\":\"841881320562cbeac7046b537b91cd000480cea2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1c1008c793fa46703a2fee469f4235e1c7984333\",\"lessThan\":\"124ca24e0de958d2e20e0aa1e2434af7b72f8887\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1c1008c793fa46703a2fee469f4235e1c7984333\",\"lessThan\":\"5f56767fb5f2df875b6553e08dbec6a45431c988\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1c1008c793fa46703a2fee469f4235e1c7984333\",\"lessThan\":\"411317d2a4a7d6049d8efeef0d32ae43f8baefce\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1c1008c793fa46703a2fee469f4235e1c7984333\",\"lessThan\":\"5c0862c2c962052ed5055220a00ac1cefb92fbcd\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/net/ethernet/broadcom/genet/bcmgenet.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.15\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.15\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.308\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.276\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.235\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.173\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.99\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.16\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.2.3\",\"lessThanOrEqual\":\"6.2.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.3\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":4.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.15\",\"versionEndExcluding\":\"4.14.308\",\"matchCriteriaId\":\"F6529FA7-0DC2-41A2-AEE7-C43E9796C426\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.276\",\"matchCriteriaId\":\"C902FC54-DDBD-4DA6-BFEF-26889A267464\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.235\",\"matchCriteriaId\":\"13DD5E68-8CB4-46EE-9A8F-C7F6C1A84430\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.173\",\"matchCriteriaId\":\"4D810CFB-B7C5-493C-B98A-0D5F0D8A47B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.99\",\"matchCriteriaId\":\"5B8B2AC9-2F31-4A0F-96F5-7E26B50B27BB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.16\",\"matchCriteriaId\":\"0FD95FDA-6525-4B13-B3FB-49D9995FD8ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.2.3\",\"matchCriteriaId\":\"88C67289-22AD-4CA9-B202-5F5A80E5BA4B\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/124ca24e0de958d2e20e0aa1e2434af7b72f8887\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/411317d2a4a7d6049d8efeef0d32ae43f8baefce\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5c0862c2c962052ed5055220a00ac1cefb92fbcd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5f56767fb5f2df875b6553e08dbec6a45431c988\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7cdb07e10c1258c08f31b24898930e4ece88d163\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/841881320562cbeac7046b537b91cd000480cea2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/87363d1ab55e497702a9506ff423c422639c8a25\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c34b1c0870323649d45c5074828d7f754dea2673\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:18:13+00:00",
      "cve": "CVE-2023-53535",
      "id": "CVE-2023-53535",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "108",
      "product_status:known_not_affected": "166",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: bcmgenet: Add a check for oversized packets",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53535.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-26T23:36:21Z",
      "cve": "CVE-2023-53535",
      "id": "CVE-2023-53535",
      "initial_release_date": "2025-10-05T02:56:45Z",
      "product_status:known_affected": "185",
      "product_status:known_not_affected": "231",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53535",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53535.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.