Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-53652

vdpa: Add features attr to vdpa_nl_policy for nlattr length check

High7.8EPSS 0.22%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: vdpa: Add features attr to vdpa_nl_policy for nlattr length check The vdpa_nl_policy structure is used to validate the nlattr when parsing the incoming nlmsg. It will ensure the attribute being described produces a valid nlattr pointer in info->attrs before entering into each handler in vdpa_nl_ops. That is to say, the missing part in vdpa_nl_policy may lead to illegal nlattr after parsing, which could lead to OOB read just like CVE-2023-3773. This patch adds the missing nla_policy for vdpa features attr to avoid such bugs.

Timeline

  1. ID reserved

    By Linux

  2. Published

  3. · 7 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-53652, by who scored it
Scored byCVSSScoreVector
NVDNVD · Analyzed3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.22% · top 88% of all CVEs (7 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

Affected products

  • Linux · Linux

    • affected 90fea5a800c3dd80fb8ad9a02929bcef5fde42b8 – < 44b508cc96889e61799cc0fc6c00766a54f3ab5a
    • affected 90fea5a800c3dd80fb8ad9a02929bcef5fde42b8 – < 645d17e06c502e71b880b2b854930e5a64014640
    • affected 90fea5a800c3dd80fb8ad9a02929bcef5fde42b8 – < 79c8651587504ba263d2fd67fd4406240fb21f69

  • Linux · Linux

    • affected 6.1
    • unaffected < 6.1
    • unaffected 6.1.47 – ≤ 6.1.*
    • unaffected 6.4.12 – ≤ 6.4.*
    • unaffected 6.5 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-53652 badge
[![CVE-2023-53652](https://trackcve.app/badge/CVE-2023-53652.svg)](https://trackcve.app/cve/CVE-2023-53652)

Record last updated .