CVE-2023-53000 Details
Description
In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated from __nla_validate_parse() or validate_nla() u16 type = nla_type(nla); if (type == 0 || type > maxtype) { /* error or continue */ } @type is then used as an array index and can be used as a Spectre v1 gadget. array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users. This should take care of vast majority of netlink uses, but an audit is needed to take care of others where validation is not yet centralized in core netlink functions.
A vulnerability allowing potential Spectre v1 exploitation through netlink attributes in the Linux kernel has been addressed. The issue arose because attribute types were not properly validated before being used as array indices, creating a risk of leaking kernel memory to malicious users. The vulnerability was mitigated by centralizing validation in core netlink functions and applying array_index_nospec() to prevent such leaks.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3e5082b1c66c7783fbcd79b5b178573230e528ff | kernel.org | Patch |
| https://git.kernel.org/stable/c/41b74e95f297ac360ca7ed6bf200100717cb6c45 | kernel.org | Patch |
| https://git.kernel.org/stable/c/539ca5dcbc91134bbe2c45677811c31d8b030d2d | kernel.org | Patch |
| https://git.kernel.org/stable/c/992e4ff7116a77968039277b5d6aaa535c2f2184 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f0950402e8c76e7dcb08563f1b4e8000fbc62455 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-129 | Improper Validation of Array Index | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.15, < 5.4.231 >= 5.5, < 5.10.166 >= 5.11, < 5.15.91 >= 5.16, < 6.1.9 6.2 rc1 6.2 rc2 6.2 rc3 6.2 rc4 6.2 rc5 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 30, 2025 | Initial Analysis | [email protected] |
| Mar 27, 2025 | New CVE Received | kernel.org |