PT-2025-49754 · Linux+1 · Linux Kernel+1
Published
2025-12-09
·
Updated
2026-03-24
·
CVE-2023-53863
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contained a flaw in the netlink subsystem related to handling device address lengths in frame database (fdb) dumps. Specifically, the code hardcoded the device address length, leading to potential issues with devices that do not have a six-byte address. This could result in kernel memory leaks due to uninitialized data being stored to memory during operations like netlink message processing and address configuration. The issue was identified through syzbot testing and involved potential problems in functions such as
nla put, nlmsg populate fdb fill, and rtnl fdb dump.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat