linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv(...
CVE-2023-53705 is fixed in 76 products on 1 platform, first by ALAS2023-2023-228, released June 21, 2023. It is not reported as exploited. Patch Radar priority: High.
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse. It can lead to out-of-bounds access. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| bpftool · RHEL 9 | 0:7.2.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| bpftool · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| bpftool-debuginfo · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel · rocky 8 | 0:4.18.0-553.123.1.el8_10.cloud.0.1 | RXSA-2024:3138 | May 29, 2026 |
| kernel-64k · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-debug · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-debug-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-debug-devel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-debug-devel-matched · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-debug-modules · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-debug-modules-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-debug-modules-extra · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-devel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-devel-matched · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-modules · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-modules-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-64k-modules-extra · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-abi-stablelists · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-abi-stablelists · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-core · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debug · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-debug · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debug-core · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-debug-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debug-devel · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-debug-devel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debug-devel-matched · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debug-modules · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-debug-modules · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debug-modules-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debug-modules-extra · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-debug-modules-extra · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debug-uki-virt · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-debuginfo · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-debuginfo-common-aarch64 · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-debuginfo-common-x86_64 · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-devel · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-devel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-devel · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-devel-matched · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-doc · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-doc · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-headers · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-libbpf · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-libbpf-devel · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-libbpf-static · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-livepatch-6.1.34-56.100 · amzn 2023 | 1.0-0.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-modules · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-modules · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-modules-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-modules-extra · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-modules-extra · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-debug · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-debug-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-debug-devel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-debug-kvm · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-debug-modules · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-debug-modules-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-debug-modules-extra · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-devel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-kvm · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-modules · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-modules-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-rt-modules-extra · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-tools · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-tools · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-tools · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-tools-debuginfo · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-tools-devel · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| kernel-tools-libs · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-tools-libs · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-tools-libs-devel · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-tools-libs-devel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-uki-virt · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-zfcpdump · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-zfcpdump · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-zfcpdump-core · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-zfcpdump-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-zfcpdump-devel · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-zfcpdump-devel · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-zfcpdump-devel-matched · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-zfcpdump-modules · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-zfcpdump-modules · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-zfcpdump-modules-core · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| kernel-zfcpdump-modules-extra · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| kernel-zfcpdump-modules-extra · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| libperf · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| linux · Debian 12.15 (bookworm) | 6.1.37-1 | DEBIAN-CVE-2023-53705 | Oct 22, 2025 |
| linux · Debian 13.5 (trixie) | 6.3.7-1 | DEBIAN-CVE-2023-53705 | Oct 22, 2025 |
| linux · Debian 14 | 6.3.7-1 | DEBIAN-CVE-2023-53705 | Oct 22, 2025 |
| perf · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| perf · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| perf · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| perf-debuginfo · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| python3-perf · RHEL 8 | 0:4.18.0-553.el8_10 | RHSA-2024:3138 | May 22, 2024 |
| python3-perf · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| python3-perf · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| python3-perf-debuginfo · amzn 2023 | 6.1.34-56.100.amzn2023 | ALAS2023-2023-228 | Jun 21, 2023 |
| rtla · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
| rv · RHEL 9 | 0:5.14.0-362.8.1.el9_3 | RHSA-2023:6583 | Nov 7, 2023 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.