CVE-2023-53535: linux kernel — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized packets from the hardware which exceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early check which drops the packet to avoid invoking skb_over_panic() and move on to processing the next packet.

Is your site exposed to CVE-2023-53535?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
linux	linux_kernel	3.15 — 4.14.308
linux	linux_kernel	4.15 — 4.19.276
linux	linux_kernel	4.20 — 5.4.235
linux	linux_kernel	5.5 — 5.10.173
linux	linux_kernel	5.11 — 5.15.99
linux	linux_kernel	5.16 — 6.1.16
linux	linux_kernel	6.2 — 6.2.3

References

Advisories & Patches

https://git.kernel.org/stable/c/124ca24e0de958d2e20e0aa1e2434af7b72f8887 https://git.kernel.org/stable/c/411317d2a4a7d6049d8efeef0d32ae43f8baefce https://git.kernel.org/stable/c/5c0862c2c962052ed5055220a00ac1cefb92fbcd https://git.kernel.org/stable/c/5f56767fb5f2df875b6553e08dbec6a45431c988 https://git.kernel.org/stable/c/7cdb07e10c1258c08f31b24898930e4ece88d163 https://git.kernel.org/stable/c/841881320562cbeac7046b537b91cd000480cea2 https://git.kernel.org/stable/c/87363d1ab55e497702a9506ff423c422639c8a25 https://git.kernel.org/stable/c/c34b1c0870323649d45c5074828d7f754dea2673

Frequently Asked Questions

What is CVE-2023-53535? +

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized packets from the hardware which exceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early check which drops the packet to avoid invoking skb_over_panic() and move on to processing the next packet. It has a CVSS v3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2023-53535? +

CVE-2023-53535 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2023-53535? +

CVE-2023-53535 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2023-53535? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-9588 10.0

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. …

CVE-2025-57870 10.0

A SQL Injection vulnerability exists in Esri ArcGIS Server versions 11.3, 11.4 and 11.5 on Windows, Linux and Kubernetes. This …

CVE-2026-48286 10.0

Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result …

CVE-2026-13782 10.0

Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer …

CVE-2026-48303 10.0

Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by an Incorrect Authorization vulnerability that could result …

CVE-2025-34028 10.0

The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when …

CVE-2023-53535